CVEvulnerability
CVE-2012-2889
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-09-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involving frames, aka "Universal XSS (UXSS)."
Affected configurations
• google chrome (<= 22.0.1229.78)
• google chrome 22.0.1229.0
• google chrome 22.0.1229.1
• google chrome 22.0.1229.2
• google chrome 22.0.1229.3
• google chrome 22.0.1229.4
• google chrome 22.0.1229.6
• google chrome 22.0.1229.7
• google chrome 22.0.1229.8
• google chrome 22.0.1229.9
• google chrome 22.0.1229.10
• google chrome 22.0.1229.11
• google chrome 22.0.1229.12
• google chrome 22.0.1229.14
• google chrome 22.0.1229.16
• google chrome 22.0.1229.17
• google chrome 22.0.1229.18
• google chrome 22.0.1229.20
• google chrome 22.0.1229.21
• google chrome 22.0.1229.22
• google chrome 22.0.1229.23
• google chrome 22.0.1229.24
• google chrome 22.0.1229.25
• google chrome 22.0.1229.26
• google chrome 22.0.1229.27
• google chrome 22.0.1229.28
• google chrome 22.0.1229.29
• google chrome 22.0.1229.31
• google chrome 22.0.1229.32
• google chrome 22.0.1229.33
• google chrome 22.0.1229.35
• google chrome 22.0.1229.36
• google chrome 22.0.1229.37
• google chrome 22.0.1229.39
• google chrome 22.0.1229.48
• google chrome 22.0.1229.49
• google chrome 22.0.1229.50
• google chrome 22.0.1229.51
• google chrome 22.0.1229.52
• google chrome 22.0.1229.53
• google chrome 22.0.1229.54
• google chrome 22.0.1229.55
• google chrome 22.0.1229.56
• google chrome 22.0.1229.57
• google chrome 22.0.1229.58
• google chrome 22.0.1229.59
• google chrome 22.0.1229.60
• google chrome 22.0.1229.62
• google chrome 22.0.1229.63
• google chrome 22.0.1229.64
• google chrome 22.0.1229.65
• google chrome 22.0.1229.67
• google chrome 22.0.1229.76
• apple iphone os (<= 6.0.2)
• apple iphone os 6.0
• apple iphone os 6.0.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html googlechromereleases.blogspot.com
- http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2013/Mar/msg00003.html lists.apple.com
- http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html lists.opensuse.org
- http://support.apple.com/kb/HT5642 support.apple.com
- https://code.google.com/p/chromium/issues/detail?id=143439 code.google.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78823 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15829 oval.cisecurity.org
- http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html googlechromereleases.blogspot.com
- http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2013/Mar/msg00003.html lists.apple.com
- http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html lists.opensuse.org
- http://support.apple.com/kb/HT5642 support.apple.com
- https://code.google.com/p/chromium/issues/detail?id=143439 code.google.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78823 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15829 oval.cisecurity.org