138154 : Google Chrome < 1.0.154.59 ChromeHTML URI Handling Privilege Escalation

Risk 3 : Windows

The version of Google Chrome installed on the remote host is earlier than 1.0.154.59. Such versions are reportedly affected by an issue when handling URLs with a 'chromehtml:' protocol which could allow an attacker to run scripts of his choosing on any page or enumerate files on the local disk.

If a user has Google Chrome installed, visiting an attacker-controlled web page in another browser could cause Google Chrome to launch, open multiple tabs, and load scripts that run after navigating to a URL of the attacker's choice.

Solution:
Upgrade to Google Chrome 1.0.154.59 or later.
References:
CVSS Information:
Partial Integrity Impact
Credit:
Tenable : 2009-12-04
New Search
Keywords
Risk Factor
Start Date
End Date
Browse