Google Chrome HTML injection vulnerability in CVE-2015-6784)

Google Chrome HTML injection vulnerability in CVE-2015-6784)
Google Chrome HTML injection vulnerability in CVE-2015-6784)

Release date:
Updated on:

Affected Systems:

Google Chrome <47.0.2526.73

Description:

CVE (CAN) ID: CVE-2015-6784

Google Chrome is a Web browser tool developed by Google.

In versions earlier than Google Chrome 47.0.2526.73, the page serializer improperly handles MOTW annotations for URLs containing "--" sequences. Remote attackers can exploit this vulnerability to inject HTML into URLs.

<* Source: Google
*>

Suggestion:

Vendor patch:

Google
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://googlechromereleases.blogspot.com/2015/12/stable-channel-update.html

This article permanently updates the link address: