NuytsTech Security

CVE-2011-3046

by ·

The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows remote attackers to execute arbitrary code by leveraging a "Universal XSS (UXSS)" issue.

Date published : 2012-03-08

http://lists.apple.com/archives/security-announce/2012/May/msg00000.html

http://lists.apple.com/archives/security-announce/2012/May/msg00002.html

Tags: