6 matches found
CVE-2012-4905
Cross-site scripting XSS vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script or HTML via an extra in an Intent object, aka "Universal XSS UXSS."...
CVE-2012-4905
Cross-site scripting XSS vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script or HTML via an extra in an Intent object, aka "Universal XSS UXSS."...
CVE-2012-4905
The CVE-2012-4905 entry describes a UXSS (Universal XSS) flaw in Chrome for Android prior to 18.0.1025308. By sending a crafted Intent with javascript: URIs and by inserting Extra data (com.android.browser.application_id => com.android.chrome) into an Intent, an attacker could execute arbitrar...
CVE-2012-4905
Removed by vendor...
CVE-2012-4905: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script or HTML via an extra in an Intent object, aka "Universal XSS UXSS."...
PT-2012-5651
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 18.0.1025308 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via an extra in an Intent object. This is also known as "Universal XSS UXSS"...