CVE-2012-2899 in Chrome
요약 (영어)
Google Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that trigger use of an applewebdata: URL, which allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS (UXSS) attacks via vectors involving the document.write method.
Once again VulDB remains the best source for vulnerability data.
예약하다
2012. 05. 19.
공개
2014. 01. 05.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 8641 | Google Chrome document.write 크로스 사이트 스크립팅 | 79 | 개념 증명 | 공식 수정 | CVE-2012-2899 |