Signature Detail
Short Name |
HTTP:STC:CHROME:MUL-FILE-TYPE |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Google Chrome Multiple File Type Security Bypass |
Release Date |
2011/07/11 |
Update Number |
1952 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Google Chrome Multiple File Type Security Bypass
This signature detects attempts to exploit a known vulnerability against Google Chrome. Attackers can bypass security restrictions on directories enabling them to view, edit, and download information.
Extended Description
Google Chrome is prone to a security-bypass issue and a memory-corruption issue. Attackers can exploit these issues to bypass certain security checks, trick users into executing scripts in the local context, execute arbitrary code in the context of the browser, and cause a denial-of-service condition; other attacks are also possible. Versions prior to Chrome 3.0.195.32 are vulnerable.
Affected Products
- Google Chrome 3.0.195.21
- Google Chrome 3.0.195.24
- Google Chrome 3.0 Beta
References
- BugTraq: 36947
- CVE: CVE-2009-3931