Lansweeper » Vulnerability Reports » Google Chrome 75 Security Update

Join Now

Notification

Error

Google Chrome 75 Security Update

Posted: Wednesday, June 5, 2019 2:09:26 PM(UTC)

Esben.D

Member Administration Original PosterPosts: 1,956

With the release of Chrome 75, Google also unveiled multiple CVEs and security fixes that are included. For an overview of what security related issues were fixed, you can head over to our blog post.

Similar to our previous Google Chrome vulnerability reports, this report provides a color-coded overview of all Google Chrome installations in your network and indicated whether they are on version 75 or not.

Instructions to run this report can be found here: https://www.lansweeper.c...ow-to-run-a-report.aspx

Code:

Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tsysAssetTypes.AssetTypename As AssetType,
  tblAssets.Username,
  tblAssets.Userdomain,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
    tblSoftwareUni.softwareName As Software,
  tblSoftware.softwareVersion As Version,
  tblSoftwareUni.SoftwarePublisher As Publisher,
      Case
    When tblSoftware.softwareVersion LIKE '75%' Then 'Up to date'
    Else 'Out of date'
  End As [Patch Status],
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tsysOS.OSname As OS,
  tblAssets.SP,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  tblSoftware.Lastchanged,
  Case
    When tblSoftware.softwareVersion LIKE '75%' Then '#d4f4be'
    Else '#ffadad'
  End As backgroundcolor
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tsysIPLocations On tsysIPLocations.LocationID =
    tblAssets.LocationID
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
  Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID
  Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where tblSoftwareUni.softwareName Like '%Google Chrome%' And tblState.Statename =
  'Active'
Union
Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tsysAssetTypes.AssetTypename As AssetType,
  tblAssets.Username,
  tblAssets.Userdomain,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
    tblSoftwareUni.softwareName As Software,
  tblMacApplications.Version As Version,
  tblSoftwareUni.SoftwarePublisher As Publisher,
      Case
    When tblMacApplications.Version LIKE '75%' Then 'Up to date'
    Else 'Out of date'
  End As [Patch Status],
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tblMacOSInfo.SystemVersion As OS,
  tblAssets.SP,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  tblMacApplications.LastChanged,
  Case
    When tblMacApplications.Version LIKE '75%' Then '#d4f4be'
    Else '#ffadad'
  End As backgroundcolor
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tsysIPLocations On tsysIPLocations.LocationID =
    tblAssets.LocationID
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Inner Join tblMacApplications On
    tblAssets.AssetID = tblMacApplications.AssetID
  Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblMacApplications.softid
  Inner Join tblMacOSInfo On tblMacOSInfo.AssetID = tblAssets.AssetID
Where tblSoftwareUni.softwareName Like '%Google Chrome%' And tblState.Statename =
  'Active'
Union
Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tsysAssetTypes.AssetTypename As AssetType,
  tblAssets.Username,
  tblAssets.Userdomain,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
    tblSoftwareUni.softwareName As Software,
  tblLinuxSoftware.Version As Version,
  tblSoftwareUni.SoftwarePublisher As Publisher,
        Case
    When tblLinuxSoftware.Version LIKE '75%' Then 'Up to date'
    Else 'Out of date'
  End As [Patch Status],
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tblLinuxSystem.OSRelease As OS,
  tblAssets.SP,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  tblLinuxSoftware.LastChanged,
  Case
    When tblLinuxSoftware.Version LIKE '75%' Then '#d4f4be'
    Else '#ffadad'
  End As backgroundcolor
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tsysIPLocations On tsysIPLocations.LocationID =
    tblAssets.LocationID
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Inner Join tblLinuxSoftware On tblAssets.AssetID = tblLinuxSoftware.AssetID
  Inner Join tblSoftwareUni On
    tblSoftwareUni.SoftID = tblLinuxSoftware.SoftwareUniID
  Inner Join tblLinuxSystem On tblAssets.AssetID = tblLinuxSystem.AssetID
Where tblSoftwareUni.softwareName Like '%google-chrome%' And tblState.Statename =
  'Active'
Order By Domain,
  AssetName,
  Software

Options

#1 nnewton Member Posts: 10

posted: 6/12/2019 5:19:44 AM(UTC)

If anyone is looking for a better way to do version number criteria, I am using this:

Code:


                   CASE
                       WHEN LEN(Replace(tblSoftware.softwareVersion,' ','.'))-LEN(Replace(Replace(tblSoftware.softwareVersion,' ','.'),'.','')) <= 3
                       THEN CASE
                                WHEN REVERSE(PARSENAME(REVERSE(Replace(tblSoftware.softwareVersion,' ','.')),1)) < 75
                                     OR (REVERSE(PARSENAME(REVERSE(Replace(tblSoftware.softwareVersion,' ','.')),1)) = 75
                                         AND REVERSE(PARSENAME(REVERSE(Replace(tblSoftware.softwareVersion,' ','.')),2)) = 0
                                         AND REVERSE(PARSENAME(REVERSE(Replace(tblSoftware.softwareVersion,' ','.')),3)) < 3770)
                                     OR (REVERSE(PARSENAME(REVERSE(Replace(tblSoftware.softwareVersion,' ','.')),1)) = 75
                                         AND REVERSE(PARSENAME(REVERSE(Replace(tblSoftware.softwareVersion,' ','.')),2)) = 0
                                         AND REVERSE(PARSENAME(REVERSE(Replace(tblSoftware.softwareVersion,' ','.')),3)) = 3770
                                         AND REVERSE(PARSENAME(REVERSE(Replace(tblSoftware.softwareVersion,' ','.')),4)) < 80)
                                THEN 'Vulnerable'
                                ELSE 'Safe'
                            END
                       ELSE 'Unknown'
                   END AS Vulnerablity,

The 1/2/3/4 near the end of the lines is the segment of the version number you want to look at, it will only work with version numbers with up to 4 version parts. In my testing, it should also work if there is text after the version number, e.g.: "1.2.3.4 beta"

This particular example flags anything with a version less than 75.0.3770.80 as vulnerable.

I'm using this on SQL Server 2014 Standard, so YMMV on other versions.

Credit to this Stack Overflow post for the idea: https://stackoverflow.co...ee-columns-by-deliminter

#2 stanislav.tsenkov Member Posts: 2

posted: 6/12/2019 11:48:55 AM(UTC)

Hi. This is report with vulnerable assets only.

Code:

Select Top 1000000 *
From (Select Top 1000000 tblAssets.AssetID,
        tblAssets.AssetName,
        tblAssets.Domain,
        tsysAssetTypes.AssetTypename As AssetType,
        tblAssets.Username,
        tblAssets.Userdomain,
        tsysAssetTypes.AssetTypeIcon10 As icon,
        tblAssets.IPAddress,
        tblSoftwareUni.softwareName As Software,
        tblSoftware.softwareVersion As Version,
        tblSoftwareUni.SoftwarePublisher As Publisher,
        Case
          When tblSoftware.softwareVersion Like '75%' Then 'Up to date'
          Else 'Out of date'
        End As Patch_Status,
        tsysIPLocations.IPLocation,
        tblAssetCustom.Manufacturer,
        tblAssetCustom.Model,
        tsysOS.OSname As OS,
        tblAssets.SP,
        tblAssets.Lastseen,
        tblAssets.Lasttried,
        tblSoftware.Lastchanged,
        Case
          When tblSoftware.softwareVersion Like '75%' Then '#d4f4be'
          Else '#ffadad'
        End As backgroundcolor
      From tblAssets
        Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
        Inner Join tsysAssetTypes On tsysAssetTypes.AssetType =
          tblAssets.Assettype
        Inner Join tsysIPLocations On tsysIPLocations.LocationID =
          tblAssets.LocationID
        Inner Join tblState On tblState.State = tblAssetCustom.State
        Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
        Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID
        Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
      Where tblSoftwareUni.softwareName Like '%Google Chrome%' And
        tblState.Statename = 'Active'
      Union
      Select Top 1000000 tblAssets.AssetID,
        tblAssets.AssetName,
        tblAssets.Domain,
        tsysAssetTypes.AssetTypename As AssetType,
        tblAssets.Username,
        tblAssets.Userdomain,
        tsysAssetTypes.AssetTypeIcon10 As icon,
        tblAssets.IPAddress,
        tblSoftwareUni.softwareName As Software,
        tblMacApplications.Version As Version,
        tblSoftwareUni.SoftwarePublisher As Publisher,
        Case
          When tblMacApplications.Version Like '75%' Then 'Up to date'
          Else 'Out of date'
        End As Patch_Status,
        tsysIPLocations.IPLocation,
        tblAssetCustom.Manufacturer,
        tblAssetCustom.Model,
        tblMacOSInfo.SystemVersion As OS,
        tblAssets.SP,
        tblAssets.Lastseen,
        tblAssets.Lasttried,
        tblMacApplications.LastChanged,
        Case
          When tblMacApplications.Version Like '75%' Then '#d4f4be'
          Else '#ffadad'
        End As backgroundcolor
      From tblAssets
        Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
        Inner Join tsysAssetTypes On tsysAssetTypes.AssetType =
          tblAssets.Assettype
        Inner Join tsysIPLocations On tsysIPLocations.LocationID =
          tblAssets.LocationID
        Inner Join tblState On tblState.State = tblAssetCustom.State
        Inner Join tblMacApplications On tblAssets.AssetID =
          tblMacApplications.AssetID
        Inner Join tblSoftwareUni On tblSoftwareUni.SoftID =
          tblMacApplications.softid
        Inner Join tblMacOSInfo On tblMacOSInfo.AssetID = tblAssets.AssetID
      Where tblSoftwareUni.softwareName Like '%Google Chrome%' And
        tblState.Statename = 'Active'
      Union
      Select Top 1000000 tblAssets.AssetID,
        tblAssets.AssetName,
        tblAssets.Domain,
        tsysAssetTypes.AssetTypename As AssetType,
        tblAssets.Username,
        tblAssets.Userdomain,
        tsysAssetTypes.AssetTypeIcon10 As icon,
        tblAssets.IPAddress,
        tblSoftwareUni.softwareName As Software,
        tblLinuxSoftware.Version As Version,
        tblSoftwareUni.SoftwarePublisher As Publisher,
        Case
          When tblLinuxSoftware.Version Like '75%' Then 'Up to date'
          Else 'Out of date'
        End As Patch_Status,
        tsysIPLocations.IPLocation,
        tblAssetCustom.Manufacturer,
        tblAssetCustom.Model,
        tblLinuxSystem.OSRelease As OS,
        tblAssets.SP,
        tblAssets.Lastseen,
        tblAssets.Lasttried,
        tblLinuxSoftware.LastChanged,
        Case
          When tblLinuxSoftware.Version Like '75%' Then '#d4f4be'
          Else '#ffadad'
        End As backgroundcolor
      From tblAssets
        Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
        Inner Join tsysAssetTypes On tsysAssetTypes.AssetType =
          tblAssets.Assettype
        Inner Join tsysIPLocations On tsysIPLocations.LocationID =
          tblAssets.LocationID
        Inner Join tblState On tblState.State = tblAssetCustom.State
        Inner Join tblLinuxSoftware On
          tblAssets.AssetID = tblLinuxSoftware.AssetID
        Inner Join tblSoftwareUni On tblSoftwareUni.SoftID =
          tblLinuxSoftware.SoftwareUniID
        Inner Join tblLinuxSystem On tblAssets.AssetID = tblLinuxSystem.AssetID
      Where tblSoftwareUni.softwareName Like '%google-chrome%' And
        tblState.Statename = 'Active') a
Where a.Patch_Status = 'Out of date'
Order By a.Domain,
  a.AssetName,
  a.Software

Active Discussions

Install Adobe Acrobat Reader DC + SD + newest Update
by Justin_Toronto

Last post: 12/2/2019 3:26:10 PM(UTC)

Windows 10 Upgrade
by CyberCitizen

Last post: 12/2/2019 12:20:57 AM(UTC)

Team Viewer Host update / install
by BastiOn

Last post: 11/27/2019 2:09:10 PM(UTC)

Office 2016 Update
by Cem Serdar

Last post: 11/7/2019 12:05:50 PM(UTC)

Mozilla FireFox 70.0 Install
by CyberCitizen

Last post: 11/7/2019 12:09:14 AM(UTC)

Update Chrome browser with GoogleUpdate.exe ?
by Mike Carey

Last post: 11/6/2019 10:35:43 PM(UTC)

KMS Activation: Office2013/16 & Windows 7/10 or only Office 2013/16
by abs0lut3

Last post: 10/17/2019 11:00:54 AM(UTC)

CutePDF and Ghostscript install (Print to PDF)
by Ruben1

Last post: 10/15/2019 10:35:05 AM(UTC)

Notification

Google Chrome 75 Security Update

Esben.D

Active Discussions

Product

Company

Help

Contact

Social Media