medium4.3
CVE-2012-2899
Google Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that trigger use of an applewebdata: URL, which allows remote attacke…
Impact
Google Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that trigger use of an applewebdata: URL, which allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS (UXSS) attacks via vectors involving the document.write method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | through 21.0.1180.81 Versions 21.0.1180.0, 21.0.1180.1, 21.0.1180.2, 21.0.1180.31, 21.0.1180.32 |