Lucene search

K
cveMitreCVE-2012-4904
HistorySep 13, 2012 - 8:55 p.m.

CVE-2012-4904

2012-09-1320:55:01
CWE-79
mitre
web.nvd.nist.gov
42
cve-2012-4904
cross-application scripting
google chrome
android
remote attackers
web script
universal xss (uxss)

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

44.6%

Cross-application scripting vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script via unspecified vectors, as demonstrated by “Universal XSS (UXSS)” attacks against the current tab.

Affected configurations

Nvd
Node
googlechromeRange18.0.1025306
AND
googleandroid
VendorProductVersionCPE
googlechrome*cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

44.6%