The host is installed with Google Chrome and is prone to cross-site request forgery attack.

Successful exploitation will allow remote attackers to conduct the equivalent of a persistent Logout cross-site request forgery (CSRF) attack. Impact Level: Application

Upgrade to Google Chrome version 29 or later, For updates refer to http://www.google.com/chrome

The flaw is due to improper validation of 'HTTP Cookie headers' for restricted character-set.

Google Chrome version prior to 29 on Windows.

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://seclists.org/oss-sec/2013/q4/117
• http://www.openwall.com/lists/oss-security/2013/04/03/10
• https://code.google.com/p/chromium/issues/detail?id=238041

---

Updated on 2015-03-25