oval:org.mitre.oval:def:22690
| Definition Id: oval:org.mitre.oval:def:22690 | |||
| Oval ID: | oval:org.mitre.oval:def:22690 | ||
| Title: | A cross-site scripting issue in events | ||
| Description: | The GenerateFunction function in bindings/scripts/code_generator_v8.pm in Blink, as used in Google Chrome before 33.0.1750.149, does not implement a certain cross-origin restriction for the EventTarget::dispatchEvent function, which allows remote attackers to conduct Universal XSS (UXSS) attacks via vectors involving events. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2014-1701 | Version: | 5 |
| Platform(s): | Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 | Product(s): | Google Chrome |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:11914 | |||
| Oval ID: | oval:org.mitre.oval:def:11914 | ||
| Title: | Google Chrome is installed | ||
| Description: | Google Chrome is installed | ||
| Family: | windows | Class: | inventory |
| Reference(s): | cpe:/a:google:chrome | Version: | 20 |
| Platform(s): | Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 | Product(s): | Google Chrome |
| Definition Synopsis: | |||
| Referenced By: | |||
| oval:org.mitre.oval:def:22690 | |||
