138154 : Google Chrome < ChromeHTML URI Handling Privilege Escalation

Risk 3 : Windows

The version of Google Chrome installed on the remote host is earlier than Such versions are reportedly affected by an issue when handling URLs with a 'chromehtml:' protocol which could allow an attacker to run scripts of his choosing on any page or enumerate files on the local disk.

If a user has Google Chrome installed, visiting an attacker-controlled web page in another browser could cause Google Chrome to launch, open multiple tabs, and load scripts that run after navigating to a URL of the attacker's choice.

Upgrade to Google Chrome or later.
CVSS Information:
Partial Integrity Impact
Tenable : 2009-12-04
New Search
Risk Factor
Start Date
End Date