QwikSec

Security Database

CVE

CWE

Training

CVE-2014-1747

Published: May 21, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content, aka "Universal XSS (UXSS)."

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_DEBIAN

http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_GENTOO

openSUSE-SU-2014:0783

vendor-advisory

x_refsource_SUSE

https://src.chromium.org/viewvc/blink?revision=169499&view=revision

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_SECTRACK

https://code.google.com/p/chromium/issues/detail?id=330663

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.