Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-4904

Опубликовано: 13 сент. 2012
Источник: nvd
CVSS2: 4.3
EPSS Низкий

Описание

Cross-application scripting vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script via unspecified vectors, as demonstrated by "Universal XSS (UXSS)" attacks against the current tab.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Версия до 18.0.1025306 (включая)
cpe:2.3:o:google:android:*:*:*:*:*:*:*:*

EPSS

Процентиль: 36%
0.00152
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

ubuntu
больше 13 лет назад

Cross-application scripting vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script via unspecified vectors, as demonstrated by "Universal XSS (UXSS)" attacks against the current tab.

debian
больше 13 лет назад

Cross-application scripting vulnerability in Google Chrome before 18.0 ...

github
больше 3 лет назад

Cross-application scripting vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script via unspecified vectors, as demonstrated by "Universal XSS (UXSS)" attacks against the current tab.

EPSS

Процентиль: 36%
0.00152
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79