CVE-2012-2889

Опубликовано: 26 сент. 2012

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involving frames, aka "Universal XSS (UXSS)."

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Версия до 22.0.1229.78 (включая)

cpe:2.3:a:google:chrome:22.0.1229.0:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.1:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.2:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.3:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.4:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.6:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.7:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.8:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.9:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.10:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.11:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.12:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.14:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.16:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.17:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.18:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.20:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.21:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.22:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.23:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.24:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.25:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.26:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.27:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.28:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.29:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.31:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.32:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.33:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.35:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.36:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.37:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.39:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.48:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.49:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.50:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.51:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.52:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.53:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.54:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.55:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.56:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.57:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.58:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.59:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.60:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.62:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.63:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.64:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.65:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.67:*:*:*:*:*:*:*

cpe:2.3:a:google:chrome:22.0.1229.76:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 6.0.2 (включая)

cpe:2.3:o:apple:iphone_os:6.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:6.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 59%

0.00389

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2012-2889

ubuntu

почти 13 лет назад

Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involving frames, aka "Universal XSS (UXSS)."

CVE-2012-2889

debian

почти 13 лет назад

Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0. ...

GHSA-xw43-24rr-hxcr

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involving frames, aka "Universal XSS (UXSS)."

EPSS

Процентиль: 59%

0.00389

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79