CVE-2014-1747: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content, aka "Universal XSS UXSS."...

PT-2014-1073

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 35.0.1916.114 Description A cross-site scripting XSS issue exists in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, allowing remote attackers to inject arbitrary web...