The version of Google Chrome installed on the remote host is earlier than 20.0.1132.43 and is, therefore, affected by the following vulnerabilities :

  - An error exists related to the loading of the 'metro'     DLL. (CVE-2012-2764)

  - An error exists related to the leaking of iframe     fragment id. (CVE-2012-2815)

  - An error exists that allows sandboxes to interfere with     each other. (CVE-2012-2816)

  - Multiple use-after-free errors exist related to table     section handling, counter layout, SVG resource handling,     SVG painting, first-letter handling and SVG reference     handling. (CVE-2012-2817, CVE-2012-2818, CVE-2012-2823,     CVE-2012-2824, CVE-2012-2829, CVE-2012-2831)

  - An error exists related to texture handling that can     cause application crashes. (CVE-2012-2819)

  - Out-of-bounds read errors exist related to SVG     filter handling and texture conversion. (CVE-2012-2820,     CVE-2012-2826)

  - An unspecified error exists related to autofill display     actions. (CVE-2012-2821)

  - Several 'OOB' read issues exist related to PDF     processing. (CVE-2012-2822)

  - A read error exists related to XSL handling.
    (CVE-2012-2825)

  - Several integer overflow issues exist related to PDF     processing. (CVE-2012-2828)

  - A pointer issue exists related to the setting of array     values. (CVE-2012-2830)

  - An uninitialized pointer issue exists related to the     PDF image codec. (CVE-2012-2832)

  - A buffer overflow error exists related to the PDF     JavaScript API. (CVE-2012-2833)

  - An integer overflow error exists related to the     'Matroska' container. (CVE-2012-2834)

リモートホストにインストールしたGoogle Chromeのバージョンは、 20.0.1132.43より以前のバージョンのため、以下の脆弱性の影響を受けます。

  - An error exists related to the loading of the 'metro' DLL. (CVE-2012-2764)

  - iframe フラグメント id の漏洩に関連するエラーが存在します。（CVE-2012-2815）

  - An error exists that allows sandboxes to interfere with each other. (CVE-2012-2816)

  - Multiple use-after-free errors exist related to table section handling, counter layout, SVG resource handling, SVG painting, first-letter handling and SVG reference handling. (CVE-2012-2817, CVE-2012-2818, CVE-2012-2823, CVE-2012-2824, CVE-2012-2829, CVE-2012-2831)

  - An error exists related to texture handling that can cause application crashes. (CVE-2012-2819)

  - Out-of-bounds read errors exist related to SVG filter handling and texture conversion. (CVE-2012-2820, CVE-2012-2826)

  - An unspecified error exists related to autofill display actions. (CVE-2012-2821)

  - Several 'OOB' read issues exist related to PDF processing. (CVE-2012-2822)

  - XSL の処理に関連する読み取りエラーが存在します。
    (CVE-2012-2825)

  - Several integer overflow issues exist related to PDF processing. (CVE-2012-2828)

  - A pointer issue exists related to the setting of array values. (CVE-2012-2830)

  - An uninitialized pointer issue exists related to the PDF image codec. (CVE-2012-2832)

  - A buffer overflow error exists related to the PDF JavaScript API. (CVE-2012-2833)

  - An integer overflow error exists related to the 'Matroska' container. (CVE-2012-2834)

遠端主機上安裝的 Google Chrome 版本比 20.0.1132.43 舊。因此，受到下列弱點的影響：

- 存在一個與載入 'metro' DLL 相關的錯誤。(CVE-2012-2764)

- 存在一個與洩漏 iframe 片段 id 相關的錯誤 (CVE-2012-2815)

- 存在一個可讓沙箱彼此干擾的錯誤。(CVE-2012-2816)

- 存在多個與表格區段處理、計數器配置、SVG 資源處理、SVG 繪製、首字母處理，以及 SVG 參照處理相關的釋放後使用錯誤。(CVE-2012-2817、CVE-2012-2818、CVE-2012-2823、CVE-2012-2824、CVE-2012-2829、CVE-2012-2831)

- 存在一個與紋理處理相關的錯誤，此錯誤可造成應用程式損毀。(CVE-2012-2819)

- 存在多個與 SVG 篩選器處理和紋理轉換相關的超出邊界讀取錯誤。(CVE-2012-2820、CVE-2012-2826)

- 存在一個與自動填滿顯示動作相關的不明錯誤。(CVE-2012-2821)

- 存在數個與 PDF 處理相關的 'OOB' 讀取問題。(CVE-2012-2822)

- 存在一個與 XSL 處理相關的讀取錯誤。
 (CVE-2012-2825)

- 存在數個與 PDF 處理相關的整數溢位問題。(CVE-2012-2828)

- 存在一個與設定陣列值相關的指標問題。(CVE-2012-2830)

- 存在一個與 PDF 影像轉碼器相關的未初始化指標問題。(CVE-2012-2832)

- 存在一個與 PDF JavaScript API 相關的緩衝區溢位錯誤。(CVE-2012-2833)

- 存在一個與 'Matroska' 容器相關的整數溢位錯誤。(CVE-2012-2834)

远程主机上安装的 Google Chrome 版本低于 20.0.1132.43，因此受到以下漏洞的影响：

- 存在一个与加载“metro”DLL 有关的错误。(CVE-2012-2764)

- 存在一个与泄漏 iframe 片段 id 有关的错误 (CVE-2012-2815)

- 存在一个允许沙盒互相干预的错误。(CVE-2012-2816)

- 存在多种与表部分处理、计数器布局、SVG 资源处理、SVG 绘制、首字母处理和 SVG 引用处理有关的释放后使用错误。（CVE-2012-2817、CVE-2012-2818、CVE-2012-2823、CVE-2012-2824、CVE-2012-2829、CVE-2012-2831）

- 存在一个与纹理处理有关的错误，可造成应用程序崩溃。(CVE-2012-2819)

- 存在若干与 SVG 过滤器处理和纹理转换有关的越界读取错误。（CVE-2012-2820、CVE-2012-2826）

- 存在一个与 autofill 显示操作有关的不明错误。(CVE-2012-2821)

- 存在多个与 PDF 处理有关的越界读取问题。(CVE-2012-2822)

- 存在一个与 XSL 处理有关的读取错误。
 (CVE-2012-2825)

- 存在多个与 PDF 处理有关的整数溢出问题。(CVE-2012-2828)

- 存在一个与数组值的设置有关的指针问题。(CVE-2012-2830)

- 存在一个与 PDF 图像编解码器有关的未初始化指针问题。(CVE-2012-2832)

- 存在一个与 PDF JavaScript API 有关的缓冲区溢出错误。(CVE-2012-2833)

- 存在一个于“Matroska”容器有关的整数溢出错误。(CVE-2012-2834)

Versions of Google Chrome earlier than 20.0.1132.43 are potentially affected by the following vulnerabilities :

  - An unspecified error allows access to iFrame fragment ID information, (CVE-2012-2815)

  - An unspecified issue is triggered when sandboxed processes interfere with one another. (CVE-2012-2816)

  - A user-after free issue exists in handling table sections which may allow for execution of arbitrary code. (CVE-2012-02817)

  - An unspecified use-after-free flaw exists in the counter layout which may allow for execution of arbitrary code. (CVE-2012-2818)

  -  A flaw exists in the WebGL subsystem when the texSubImage2d implementation does not properly handle uploads to floating-point textures, which may allow a remote denial of service. (CVE-2012-2919)

  - An out-of-bounds read error occurs during the handling of SVG filters, which may allow a remote denial of service. (CVE-2012-2820)

  - A flaw exists in the autofill display. No further details have been provided. (CVE-2012-2821)

  - An out-of-bounds read error occurs during the handling of PDF files, which may allow multiple unspecified remote denial of service attacks. (CVE-2012-2822)

  - An user-after-free flaw exists during the handling of SVG resources, which may allow for execution of arbitrary code. (CVE-2012-2823, CVE-2012-2831)

  - An user-after-free flaw exists in SVG painting. No further details have been provided. (CVE-2012-2824)

  - An out-of-bounds read error occurs during texture conversion which may allow a remote denial of service. (CVE-2012-2826)

  - An use-after-free flaw in the Mac GUI. No further details have been provided. (CVE-2012-2827)

  - A flaw exists in improper sanitizing of user-supplied inputting resulting in multiple unspecified integer overflows with a specially crafted PDF file. (CVE-2012-2828)

  - An user-after-free flaw is triggered during handling of first letters. No further details have been provided. (CVE-2012-2829)

  - A flaw is triggered when an unspecified NULL pointer dereference occurs in array setting handling. (CVE-2012-2830)

  - A flaw is triggered when a NULL pointer dereference occurs in a PDF image codec. (CVE-2012-2832)

  - An overflow condition occurs when the PDF JS API fails to properly sanitize user-supplied input resulting in a buffer overflow. (CVE-2012-2833)

  - An overflow condition occurs in the Matroska container which fails to properly sanitize user-supplied input resulting in an integer overflow. (CVE-2012-2834)

  - A flaw exists in the way it loads dynamic-link-libraries (DLL). (CVE-2012-2764)

  - A flaw is triggered when an unspecified wild read occurs during the handling of XSL. (CVE-2012-2825)

  - This issue is only present on 64-bit Linux platforms. The libxml is prone to multiple unspecified overflow conditions. (CVE-2012-2807)

ID	名稱	產品	系列	已發布	已更新	嚴重性
59735	Google Chrome < 20.0.1132.43 Multiple Vulnerabilities	Nessus	Windows	2012/6/27	2022/4/11	high
59735	20.0.1132.43 より前の Google Chrome の複数の脆弱性	Nessus	Windows	2012/6/27	2022/4/11	high
59735	Google Chrome < 20.0.1132.43 多個弱點	Nessus	Windows	2012/6/27	2022/4/11	high
59735	Google Chrome < 20.0.1132.43 多种漏洞	Nessus	Windows	2012/6/27	2022/4/11	high
800967	Google Chrome < 20.0.1132.43 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2012/7/5		high

偵測

搜尋 Plugin

high

high

high

high

high