CVE-2012-2899 in Chromeinfo

Zusammenfassung

von MITRE

Google Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that trigger use of an applewebdata: URL, which allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS (UXSS) attacks via vectors involving the document.write method.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservieren

19.05.2012

Veröffentlichung

05.01.2014

Moderieren

akzeptiert

Eintrag

VDB-8641

CPE

bereit

EPSS

0.00813

KEV

nein

Aktivitäten

very low

Sektor

Insurance, Police, ...

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2012-2899
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2012-2899
CVE Detailshttps://www.cvedetails.com/cve/CVE-2012-2899/

◂ ZurückÜbersichtWeiter ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!