The host is installed with Google Chrome and is prone to multiple XSS vulnerabilities.

Successful exploitation will let the attacker execute arbitrary codes and XSS attack in the context of the web browser.

Upgrade to Google Chrome version 1.0.154.59. http://www.google.com/chrome

- Error in chromeHTML URL protocol handler, that do not satisfy the IsWebSafeScheme restriction via a web page that sets document.location and also that are not constructed with sufficient escaping hence when invoked by Internet Explorer might open multiple tabs for unconstrained protocols such as javascript: or file:. - It may allow malicious URLs to bypass the same-origin policy and obtain sensitive information including authentication credentials.

Google Chrome versions prior to 1.0.154.59.

• http://code.google.com/p/chromium/issues/detail?id=9860
• http://googlechromereleases.blogspot.com/2009/04/stable-update-security-fix.html
• http://secunia.com/advisories/34900

---

Updated on 2015-03-25