The version of Google Chrome installed on the remote macOS host is prior to 51.0.2704.63. It is, therefore, affected by multiple vulnerabilities as referenced in the 2016_05_stable-channel-update_25 advisory.

  - Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a     denial of service or possibly have other impact via unknown vectors. (CVE-2016-1695)

  - The ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the extension     bindings in Google Chrome before 51.0.2704.63 mishandles properties, which allows remote attackers to     conduct bindings-interception attacks and bypass the Same Origin Policy via unspecified vectors.
    (CVE-2016-1672)

  - Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin     Policy via unspecified vectors. (CVE-2016-1673)

  - The extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass the Same     Origin Policy via unspecified vectors. (CVE-2016-1674)

  - Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin     Policy by leveraging the mishandling of Document reattachment during destruction, related to     FrameLoader.cpp and LocalFrame.cpp. (CVE-2016-1675)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Chromium was updated to 51.0.2704.79 to fix the following vulnerabilities :

  - CVE-2016-1696: Cross-origin bypass in Extension bindings

  - CVE-2016-1697: Cross-origin bypass in Blink

  - CVE-2016-1698: Information leak in Extension bindings

  - CVE-2016-1699: Parameter sanitization failure in     DevTools

  - CVE-2016-1700: Use-after-free in Extensions

  - CVE-2016-1701: Use-after-free in Autofill

  - CVE-2016-1702: Out-of-bounds read in Skia

  - CVE-2016-1703: Various fixes from internal audits,     fuzzing and other initiatives Also includes     vulnerabilities fixed in 51.0.2704.63 (boo#981886) :

  - CVE-2016-1672: Cross-origin bypass in extension bindings

  - CVE-2016-1673: Cross-origin bypass in Blink

  - CVE-2016-1674: Cross-origin bypass in extensions

  - CVE-2016-1675: Cross-origin bypass in Blink

  - CVE-2016-1676: Cross-origin bypass in extension bindings

  - CVE-2016-1677: Type confusion in V8

  - CVE-2016-1678: Heap overflow in V8

  - CVE-2016-1679: Heap use-after-free in V8 bindings

  - CVE-2016-1680: Heap use-after-free in Skia

  - CVE-2016-1681: Heap overflow in PDFium

  - CVE-2016-1682: CSP bypass for ServiceWorker

  - CVE-2016-1683: Out-of-bounds access in libxslt

  - CVE-2016-1684: Integer overflow in libxslt

  - CVE-2016-1685: Out-of-bounds read in PDFium

  - CVE-2016-1686: Out-of-bounds read in PDFium

  - CVE-2016-1687: Information leak in extensions

  - CVE-2016-1688: Out-of-bounds read in V8

  - CVE-2016-1689: Heap buffer overflow in media

  - CVE-2016-1690: Heap use-after-free in Autofill

  - CVE-2016-1691: Heap buffer-overflow in Skia

  - CVE-2016-1692: Limited cross-origin bypass in     ServiceWorker

  - CVE-2016-1693: HTTP Download of Software Removal Tool

  - CVE-2016-1694: HPKP pins removed on cache clearance

  - CVE-2016-1695: Various fixes from internal audits,     fuzzing and other initiatives

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2992-1 advisory.

    An unspecified security issue was discovered in Blink. If a user were tricked in to opening a specially     crafted website, an attacker could potentially exploit this to bypass same-origin restrictions.
    (CVE-2016-1673)

    An issue was discovered with Document reattachment in Blink in some circumstances. If a user were tricked     in to opening a specially crafted website, an attacker could potentially exploit this to bypass same-     origin restrictions. (CVE-2016-1675)

    A type confusion bug was discovered in V8. If a user were tricked in to opening a specially crafted     website, an attacker could potentially exploit this to obtain sensitive information. (CVE-2016-1677)

    A heap overflow was discovered in V8. If a user were tricked in to opening a specially crafted website, an     attacker could potentially exploit this to cause a denial of service (application crash) or execute     arbitrary code. (CVE-2016-1678)

    A use-after-free was discovered in the V8ValueConverter implementation in Chromium in some circumstances.
    If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit     this to cause a denial of service (application crash) or execute arbitrary code. (CVE-2016-1679)

    A use-after-free was discovered in Skia. If a user were tricked in to opening a specially crafted website,     an attacker could potentially exploit this to cause a denial of service (application crash) or execute     arbitrary code. (CVE-2016-1680)

    A security issue was discovered in ServiceWorker registration in Blink in some circumstances. If a user     were tricked in to opening a specially crafted website, an attacker could potentially exploit this to     bypass Content Security Policy (CSP) protections. (CVE-2016-1682)

    An out-of-bounds memory access was discovered in libxslt. If a user were tricked in to opening a specially     crafted website, an attacker could potentially exploit this to cause a denial of service (application     crash) or execute arbitrary code. (CVE-2016-1683)

    An integer overflow was discovered in libxslt. If a user were tricked in to opening a specially crafted     website, an attacker could potentially exploit this to cause a denial of service (application crash or     resource consumption). (CVE-2016-1684)

    An out-of-bounds read was discovered in the regular expression implementation in V8. If a user were     tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a     denial of service (application crash). (CVE-2016-1688)

    A heap overflow was discovered in Chromium. If a user were tricked in to opening a specially crafted     website, an attacker could potentially exploit this to cause a denial of service (application crash) or     execute arbitrary code. (CVE-2016-1689)

    A heap overflow was discovered in Skia. If a user were tricked in to opening a specially crafted website,     an attacker could potentially exploit this to cause a denial of service (application crash) or execute     arbitrary code. (CVE-2016-1691)

    It was discovered that Blink permits cross-origin loading of stylesheets by a service worker even when the     stylesheet download has an incorrect MIME type. If a user were tricked in to opening a specially crafted     website, an attacker could potentially exploit this to bypass same-origin restrictions. (CVE-2016-1692)

    Multiple security issues were discovered in Chromium. If a user were tricked in to opening a specially     crafted website, an attacker could potentially exploit these to read uninitialized memory, cause a denial     of service (application crash) or execute arbitrary code. (CVE-2016-1695, CVE-2016-1703)

    It was discovered that Blink does not prevent frame navigation during DocumentLoader detach operations. If     a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this     to bypass same-origin restrictions. (CVE-2016-1697)

    A parameter sanitization bug was discovered in the devtools subsystem in Blink. An attacker could     potentially exploit this to bypass intended access restrictions. (CVE-2016-1699)

    An out-of-bounds read was discovered in Skia. If a user were tricked in to opening a specially crafted     website, an attacker could potentially exploit this to cause a denial of service (application crash).
    (CVE-2016-1702)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libxslt packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - numbers.c in libxslt before 1.1.29, as used in Google     Chrome before 51.0.2704.63, mishandles the i format     token for xsl:number data, which allows remote     attackers to cause a denial of service (integer     overflow or resource consumption) or possibly have     unspecified other impact via a crafted     document.(CVE-2016-1684)

  - numbers.c in libxslt before 1.1.29, as used in Google     Chrome before 51.0.2704.63, mishandles namespace nodes,     which allows remote attackers to cause a denial of     service (out-of-bounds heap memory access) or possibly     have unspecified other impact via a crafted     document.(CVE-2016-1683)

  - A type confusion vulnerability was discovered in the     xsltStylePreCompute() function of libxslt. A remote     attacker could possibly exploit this flaw to cause an     application using libxslt to crash by tricking the     application into processing a specially crafted XSLT     document.(CVE-2015-7995)

  - In xsltCopyText in transform.c in libxslt 1.1.33, a     pointer variable isn't reset under certain     circumstances. If the relevant memory area happened to     be freed and reused in a certain way, a bounds check     could fail and memory outside a buffer could be written     to, or uninitialized data could be     disclosed.(CVE-2019-18197)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several vulnerabilities were discovered in libxslt, an XSLT processing runtime library, which could lead to information disclosure or denial-of-service (application crash) against an application using the libxslt library.

Chromium was updated to 51.0.2704.63 to fix the following vulnerabilities (boo#981886) :

  - CVE-2016-1672: Cross-origin bypass in extension bindings

  - CVE-2016-1673: Cross-origin bypass in Blink

  - CVE-2016-1674: Cross-origin bypass in extensions

  - CVE-2016-1675: Cross-origin bypass in Blink

  - CVE-2016-1676: Cross-origin bypass in extension bindings

  - CVE-2016-1677: Type confusion in V8

  - CVE-2016-1678: Heap overflow in V8

  - CVE-2016-1679: Heap use-after-free in V8 bindings

  - CVE-2016-1680: Heap use-after-free in Skia

  - CVE-2016-1681: Heap overflow in PDFium

  - CVE-2016-1682: CSP bypass for ServiceWorker

  - CVE-2016-1683: Out-of-bounds access in libxslt

  - CVE-2016-1684: Integer overflow in libxslt

  - CVE-2016-1685: Out-of-bounds read in PDFium

  - CVE-2016-1686: Out-of-bounds read in PDFium

  - CVE-2016-1687: Information leak in extensions

  - CVE-2016-1688: Out-of-bounds read in V8

  - CVE-2016-1689: Heap buffer overflow in media

  - CVE-2016-1690: Heap use-after-free in Autofill

  - CVE-2016-1691: Heap buffer-overflow in Skia

  - CVE-2016-1692: Limited cross-origin bypass in     ServiceWorker

  - CVE-2016-1693: HTTP Download of Software Removal Tool

  - CVE-2016-1694: HPKP pins removed on cache clearance

  - CVE-2016-1695: Various fixes from internal audits,     fuzzing and other initiatives

Google reports :

- [583156] Medium CVE-2016-1683: Out-of-bounds access in libxslt.
Credit to Nicolas Gregoire.

- [583171] Medium CVE-2016-1684: Integer overflow in libxslt. Credit to Nicolas Gregoire.

The remote host is affected by the vulnerability described in GLSA-201607-07 (Chromium: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in the Chromium web       browser. Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, cause a Denial of Service condition, obtain       sensitive information, or bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

Several vulnerabilities were found in libxslt.

CVE-2015-7995

A missing type check could cause an application crash via a especially crafted file.

CVE-2016-1683

An out of bounds heap access bug was found in libxslt.

CVE-2016-1684

There was an integer overflow bug in libxslt that could lead to an application crash.

For Debian 7 'Wheezy', these problems have been fixed in version 1.1.26-14.1+deb7u1.

We recommend that you upgrade your libxslt packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Google Chrome installed on the remote Windows host is prior to 51.0.2704.63. It is, therefore, affected by multiple vulnerabilities as referenced in the 2016_05_stable-channel-update_25 advisory.

  - Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a     denial of service or possibly have other impact via unknown vectors. (CVE-2016-1695)

  - The ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the extension     bindings in Google Chrome before 51.0.2704.63 mishandles properties, which allows remote attackers to     conduct bindings-interception attacks and bypass the Same Origin Policy via unspecified vectors.
    (CVE-2016-1672)

  - Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin     Policy via unspecified vectors. (CVE-2016-1673)

  - The extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass the Same     Origin Policy via unspecified vectors. (CVE-2016-1674)

  - Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin     Policy by leveraging the mishandling of Document reattachment during destruction, related to     FrameLoader.cpp and LocalFrame.cpp. (CVE-2016-1675)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Chromium is an open source web browser, powered by WebKit (Blink).

This update upgrades Chromium to version 51.0.2704.63.

Security Fix(es) :

* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2016-1672, CVE-2016-1673, CVE-2016-1674, CVE-2016-1675, CVE-2016-1676, CVE-2016-1678, CVE-2016-1679, CVE-2016-1680, CVE-2016-1681, CVE-2016-1695, CVE-2016-1677, CVE-2016-1682, CVE-2016-1683, CVE-2016-1684, CVE-2016-1685, CVE-2016-1686, CVE-2016-1687, CVE-2016-1688, CVE-2016-1689, CVE-2016-1690, CVE-2016-1691, CVE-2016-1692, CVE-2016-1693, CVE-2016-1694)

Update to 1.1.33

Fix CVE-2016-1841, CVE-2016-4607, CVE-2016-4608, CVE-2016-4610, CVE-2016-4609, CVE-2019-11068, CVE-2016-1684, CVE-2016-1683, CVE-2016-4738.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The xsltStylePreCompute function in preproc.c in     libxslt 1.1.28 does not check if the parent node is an     element, which allows attackers to cause a denial of     service via a crafted XML file, related to a 'type     confusion' issue.(CVE-2015-7995)

  - numbers.c in libxslt before 1.1.29, as used in Google     Chrome before 51.0.2704.63, mishandles namespace nodes,     which allows remote attackers to cause a denial of     service (out-of-bounds heap memory access) or possibly     have unspecified other impact via a crafted     document.(CVE-2016-1683)

  - numbers.c in libxslt before 1.1.29, as used in Google     Chrome before 51.0.2704.63, mishandles the i format     token for xsl:number data, which allows remote     attackers to cause a denial of service (integer     overflow or resource consumption) or possibly have     unspecified other impact via a crafted     document.(CVE-2016-1684)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several vulnerabilities have been discovered in the chromium web browser.

  - CVE-2016-1667     Mariusz Mylinski discovered a cross-origin bypass.

  - CVE-2016-1668     Mariusz Mylinski discovered a cross-origin bypass in     bindings to v8.

  - CVE-2016-1669     Choongwoo Han discovered a buffer overflow in the v8     JavaScript library.

  - CVE-2016-1670     A race condition was found that could cause the renderer     process to reuse ids that should have been unique.

  - CVE-2016-1672     Mariusz Mylinski discovered a cross-origin bypass in     extension bindings.

  - CVE-2016-1673     Mariusz Mylinski discovered a cross-origin bypass in     Blink/Webkit.

  - CVE-2016-1674     Mariusz Mylinski discovered another cross-origin bypass     in extension bindings.

  - CVE-2016-1675     Mariusz Mylinski discovered another cross-origin bypass     in Blink/Webkit.

  - CVE-2016-1676     Rob Wu discovered a cross-origin bypass in extension     bindings.

  - CVE-2016-1677     Guang Gong discovered a type confusion issue in the v8     JavaScript library.

  - CVE-2016-1678     Christian Holler discovered an overflow issue in the v8     JavaScript library.

  - CVE-2016-1679     Rob Wu discovered a use-after-free issue in the bindings     to v8.

  - CVE-2016-1680     Atte Kettunen discovered a use-after-free issue in the     skia library.

  - CVE-2016-1681     Aleksandar Nikolic discovered an overflow issue in the     pdfium library.

  - CVE-2016-1682     KingstonTime discovered a way to bypass the Content     Security Policy.

  - CVE-2016-1683     Nicolas Gregoire discovered an out-of-bounds write issue     in the libxslt library.

  - CVE-2016-1684     Nicolas Gregoire discovered an integer overflow issue in     the libxslt library.

  - CVE-2016-1685     Ke Liu discovered an out-of-bounds read issue in the     pdfium library.

  - CVE-2016-1686     Ke Liu discovered another out-of-bounds read issue in     the pdfium library.

  - CVE-2016-1687     Rob Wu discovered an information leak in the handling of     extensions.

  - CVE-2016-1688     Max Korenko discovered an out-of-bounds read issue in     the v8 JavaScript library.

  - CVE-2016-1689     Rob Wu discovered a buffer overflow issue.

  - CVE-2016-1690     Rob Wu discovered a use-after-free issue.

  - CVE-2016-1691     Atte Kettunen discovered a buffer overflow issue in the     skia library.

  - CVE-2016-1692     Til Jasper Ullrich discovered a cross-origin bypass     issue.

  - CVE-2016-1693     Khalil Zhani discovered that the Software Removal Tool     download was done over an HTTP connection.

  - CVE-2016-1694     Ryan Lester and Bryant Zadegan discovered that pinned     public keys would be removed when clearing the browser     cache.

  - CVE-2016-1695     The chrome development team found and fixed various     issues during internal auditing.

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-23 advisory. Several of the third-party components were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with best practice, Tenable has opted to upgrade these components to address the potential impact of the issues. Nessus Network Monitor 6.2.2 updates the following components:

  - c-ares from version 1.10.0 to version 1.19.1.
  - curl from version 7.79.1 to version 8.1.2.
  - libbzip2 from version 1.0.6 to version 1.0.8.
  - libpcre from version 8.42 to version 8.44.
  - libxml2 from version 2.7.7 to version 2.11.1.
  - libxslt from version 1.1.26 to version 1.1.37.
  - libxmlsec from version 1.2.18 to version 1.2.37.
  - sqlite from version 3.27.2 to version 3.40.1.
  - jQuery Cookie from version 1.3.1 to version 1.4.1.
  - jQuery UI from version 1.13.0 to version 1.13.2.
  - OpenSSL from version 3.0.8 to version 3.0.9.

The version of iOS running on the mobile device is prior to 9.3.3. It is, therefore, affected by multiple vulnerabilities, the most serious of which can result in remote code execution, in the following components :

  - Calendar
  - CoreGraphics
  - FaceTime
  - ImageIO
  - IOAcceleratorFamily
  - IOHIDFamily
  - Kernel
  - libxml2
  - libxslt
  - Safari
  - Sandbox Profiles
  - Siri Contacts
  - Web Media
  - WebKit
  - WebKit JavaScript Bindings
  - WebKit Page Loading

ID	名稱	產品	系列	已發布	已更新	嚴重性
91351	Google Chrome < 51.0.2704.63 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2016/5/27	2025/11/24	high
91485	openSUSE Security Update : Chromium (openSUSE-2016-682)	Nessus	SuSE Local Security Checks	2016/6/6	2021/1/19	high
91498	Ubuntu 14.04 LTS / 16.04 LTS : Oxide vulnerabilities (USN-2992-1)	Nessus	Ubuntu Local Security Checks	2016/6/7	2024/8/27	high
134504	EulerOS Virtualization for ARM 64 3.0.2.0 : libxslt (EulerOS-SA-2020-1215)	Nessus	Huawei Local Security Checks	2020/3/13	2024/3/22	high
91693	Debian DSA-3605-1 : libxslt - security update	Nessus	Debian Local Security Checks	2016/6/20	2021/1/11	high
91404	openSUSE Security Update : Chromium (openSUSE-2016-652)	Nessus	SuSE Local Security Checks	2016/6/1	2021/1/19	high
91720	FreeBSD : libxslt -- Denial of Service (1a2aa04f-3718-11e6-b3c8-14dae9d210b8)	Nessus	FreeBSD Local Security Checks	2016/6/21	2021/1/4	high
92351	GLSA-201607-07 : Chromium: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2016/7/18	2026/1/30	high
91578	Debian DLA-514-1 : libxslt security update	Nessus	Debian Local Security Checks	2016/6/14	2021/1/11	high
91350	Google Chrome < 51.0.2704.63 Multiple Vulnerabilities	Nessus	Windows	2016/5/27	2025/11/24	high
91440	RHEL 6 : chromium-browser (RHSA-2016:1190)	Nessus	Red Hat Local Security Checks	2016/6/2	2020/5/29	high
126015	Fedora 30 : mingw-libxslt (2019-320d5295fc)	Nessus	Fedora Local Security Checks	2019/6/19	2024/5/15	critical
130674	EulerOS 2.0 SP5 : libxslt (EulerOS-SA-2019-2212)	Nessus	Huawei Local Security Checks	2019/11/8	2025/11/20	high
91429	Debian DSA-3590-1 : chromium-browser - security update	Nessus	Debian Local Security Checks	2016/6/2	2021/1/11	high
177842	Nessus Network Monitor < 6.2.2 Multiple Vulnerabilities (TNS-2023-23)	Nessus	Misc.	2023/6/30	2023/7/6	critical
92359	Apple iOS < 9.3.3 Multiple Vulnerabilities	Nessus	Mobile Devices	2016/7/19	2026/11/9	critical

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

high

critical

high

high

critical

critical