Oval Definition:oval:org.mitre.oval:def:24516
Revision Date:2014-06-30Version:27
Title:Vulnerability in Google Chrome before 35.0.1916.114 allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content
Description:Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content, aka "Universal XSS (UXSS)."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2014-1747
Platform(s):Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Google Chrome
Definition Synopsis
  • Google Chrome is installed
  • AND Check if the version of Google Chrome is less than 35.0.1916.114
  • BACK