| VID |
28941 |
| Severity |
40 |
| Port |
139,445 |
| Protocol |
TCP |
| Class |
SMB |
| Detailed Description |
The version of Google Chrome installed on the remote Windows host is prior to 105.0.5195.125.
It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_09_stable-channel-update-for-desktop_14 advisory.
- Out of bounds write in Storage. (CVE-2022-3195)
- Use after free in PDF. (CVE-2022-3196, CVE-2022-3197, CVE-2022-3198)
- Use after free in Frames. (CVE-2022-3199)
- Heap buffer overflow in Internals. (CVE-2022-3200)
* References:
https://crbug.com/1358381
https://crbug.com/1358090
https://crbug.com/1358075
https://crbug.com/1355682
https://crbug.com/1355237
https://crbug.com/1355103
https://crbug.com/1343104
* Platforms Affected:
Google Chrome versions prior to 105.0.5195.125
Microsoft Windows Any version |
| Recommendation |
Upgrade to the latest version Google Chrome (105.0.5195.125 or later), available from the Google Web site at http://www.google.com/chrome/ |
| Related URL |
CVE-2022-3195,CVE-2022-3196,CVE-2022-3197,CVE-2022-3198,CVE-2022-3199,CVE-2022-3200,CVE-2022-3201 (CVE) |
| Related URL |
(SecurityFocus) |
| Related URL |
(ISS) |
|
