NVD

Id
30322  
Name
CVE-2014-1747  
Description
Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content, aka "Universal XSS (UXSS)."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-05-21  
Modified Date
2017-01-06  
Seq
2014-1747  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
160593 30322 CVE-2014-1747 http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html  View
160594 30322 CVE-2014-1747 GLSA-201408-16  View
160595 30322 CVE-2014-1747 1030270  View
160596 30322 CVE-2014-1747 https://code.google.com/p/chromium/issues/detail?id=330663  View
160597 30322 CVE-2014-1747 https://src.chromium.org/viewvc/blink?revision=169499&view=revision  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13704 JVNDB-2014-002579 Google Chrome で使用される Blink の core/loader/DocumentLoader.cpp におけるクロスサイトスクリプティングの脆弱性 Google Chrome で使用される Blink の core/loader/DocumentLoader.cpp の DocumentLoader::maybeCreateArchive 関数には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-1747 69034 CVE-2014-1747 30322 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002579.html 2014-05-20 2014-05-22 View