CVE-2012-4904

 

Published at: - 13-09-2012 10:55

Last modified: - 26-09-2022 05:45

Total changes: - 2

Description

Cross-application scripting vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script via unspecified vectors, as demonstrated by "Universal XSS (UXSS)" attacks against the current tab.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:N/I:P/A:N

 

Verification logic

 

Reference

• http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html
• https://code.google.com/p/chromium/issues/detail?id=138035

 

Keywords

NVD

 

CVE-2012-4904

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures