Google Chrome Webkit Remote Code Execution Vulnerability (Windows)

  1. Network Vulnerabilities
  2. General
  3. Google Chrome Webkit Remote Code Execution Vulnerability (Windows)
Summary
The host is installed with Google Chrome and is prone to remote code execution vulnerability.
Impact
Successful exploitation will let the attackers to execute arbitrary code via crafted SVG document. Impact Level: System/Application
Solution
Upgrade to the Google Chrome 25.0.1364.160 or later, For updates refer to http://www.google.com/chrome
Insight
WebKit contains a type confusion flaw in the 'SVGViewSpec::viewTarget' function in WebCore/svg/SVGViewSpec.cpp when handling non-SVG elements.
Affected
Google Chrome version prior to 25.0.1364.160 on Windows
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities