CVE-2009-3263

The CVE-2009-3263 entry concerns Google Chrome 2.x–3.x (before 3.0.195.21) with a cross-site scripting (XSS) vulnerability in the built-in RSS/Atom feed reader. The root cause is the rendering of application/rss+xml content as XML active content, enabling remote attackers to inject arbitrary Java...