CVE-2012-2899

Google Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that trigger use of an applewebdata: URL, which allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS UXSS attacks via vectors involving the document.write method...

CVE-2012-2899: Improper Neutralization of Input During Web Page Generation

Google Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that trigger use of an applewebdata: URL, which allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS UXSS attacks via vectors involving the document.write method...

PT-2014-2257

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 21.0.1180.82 on iOS Description The issue allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS UXSS attacks. This is achieved through certain incorrect calls to WebView methods that...