CVE

Id
40698  
CVE No.
CVE-2009-3263  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Google Chrome 2.x and 3.x before 3.0.195.21 allows remote attackers to inject arbitrary web script or HTML via a (1) RSS or (2) Atom feed, related to the rendering of the application/rss+xml content type as XML "active content."  
Phase
Assigned (20090918)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
446490 40698 CVE-2009-3263 BUGTRAQ:20090916 Exploiting Chrome and Opera"s inbuilt ATOM/RSS reader with Script Execution and more  View
446491 40698 CVE-2009-3263 URL:http://www.securityfocus.com/archive/1/archive/1/506517/100/0/threaded  View
446492 40698 CVE-2009-3263 MISC:http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/  View
446493 40698 CVE-2009-3263 CONFIRM:http://code.google.com/p/chromium/issues/detail?id=21238  View
446494 40698 CVE-2009-3263 CONFIRM:http://googlechromereleases.blogspot.com/2009/09/stable-channel-update.html  View
446495 40698 CVE-2009-3263 BID:36416  View
446496 40698 CVE-2009-3263 URL:http://www.securityfocus.com/bid/36416  View
446497 40698 CVE-2009-3263 SECUNIA:36770  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43953 JVNDB-2009-004960 Microsoft Internet Explorer 6 および 7 におけるサービス運用妨害 (DoS) の脆弱性 Microsoft Internet Explorer 6 および 7 には、サービス運用妨害 (CPU 消費) 状態となる脆弱性が存在します。 CVE-2009-3267 40698 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004960.html  View