CVEvulnerability

CVE-2014-1747

4.3 MEDIUM Published 2014-05-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-05-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content, aka "Universal XSS (UXSS)."

Affected configurations

• google chrome (<= 35.0.1916.113) • google chrome 35.0.1916.0 • google chrome 35.0.1916.1 • google chrome 35.0.1916.2 • google chrome 35.0.1916.3 • google chrome 35.0.1916.4 • google chrome 35.0.1916.5 • google chrome 35.0.1916.6 • google chrome 35.0.1916.7 • google chrome 35.0.1916.8 • google chrome 35.0.1916.9 • google chrome 35.0.1916.10 • google chrome 35.0.1916.11 • google chrome 35.0.1916.13 • google chrome 35.0.1916.14 • google chrome 35.0.1916.15 • google chrome 35.0.1916.17 • google chrome 35.0.1916.18 • google chrome 35.0.1916.19 • google chrome 35.0.1916.20 • google chrome 35.0.1916.21 • google chrome 35.0.1916.22 • google chrome 35.0.1916.23 • google chrome 35.0.1916.27 • google chrome 35.0.1916.31 • google chrome 35.0.1916.32 • google chrome 35.0.1916.33 • google chrome 35.0.1916.34 • google chrome 35.0.1916.35 • google chrome 35.0.1916.36 • google chrome 35.0.1916.37 • google chrome 35.0.1916.38 • google chrome 35.0.1916.39 • google chrome 35.0.1916.40 • google chrome 35.0.1916.41 • google chrome 35.0.1916.42 • google chrome 35.0.1916.43 • google chrome 35.0.1916.44 • google chrome 35.0.1916.45 • google chrome 35.0.1916.46 • google chrome 35.0.1916.47 • google chrome 35.0.1916.48 • google chrome 35.0.1916.49 • google chrome 35.0.1916.51 • google chrome 35.0.1916.52 • google chrome 35.0.1916.54 • google chrome 35.0.1916.56 • google chrome 35.0.1916.57 • google chrome 35.0.1916.59 • google chrome 35.0.1916.61 • google chrome 35.0.1916.68 • google chrome 35.0.1916.69 • google chrome 35.0.1916.71 • google chrome 35.0.1916.72 • google chrome 35.0.1916.74 • google chrome 35.0.1916.77 • google chrome 35.0.1916.80 • google chrome 35.0.1916.82 • google chrome 35.0.1916.84 • google chrome 35.0.1916.85 … and 20 more

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References