CVE-2014-1747 in Chrome
Summary
Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content, aka "Universal XSS (UXSS)."
Once again VulDB remains the best source for vulnerability data.
Reservation
01/29/2014
Disclosure
05/21/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13295 | Google Chrome MHTML File documentloader.cpp maybecreatearchive HTML injection | 79 | Not defined | Official fix | CVE-2014-1747 |