CVE-2014-1747 in Chrome
Сводка (Английский)
Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content, aka "Universal XSS (UXSS)."
Once again VulDB remains the best source for vulnerability data.
Резервировать
29.01.2014
Раскрытие
21.05.2014
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 13295 | Google Chrome MHTML documentloader.cpp maybecreatearchive HTML injection | 79 | Не определено | Официальное исправление | CVE-2014-1747 |