Google Chrome cross-site scripting filter Security Bypass Vulnerability

Release date:
Updated on: 2013-01-23

Affected Systems:
Google Chrome 24
Description:
--------------------------------------------------------------------------------
Bugtraq id: 57474
 
Google Chrome is a simple and efficient Web browser tool developed by Google.
 
Google Chrome has the Security Bypass Vulnerability. Attackers can exploit this vulnerability to bypass the local cross-site scripting filter AntiXSS, execute arbitrary script code, and steal cookie authentication creden.
 
<* Source: WHK Yan

Link: http://seclists.org/fulldisclosure/2013/Jan/161
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Google
------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:
 
Http://www.google.com