Security Advisory

CVE-2009-3264

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-09-18 22:00:00

Last updated 2024-08-07 06:22:24

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The getSVGDocument method in Google Chrome before 3.0.195.21 omits an unspecified "access check," which allows remote web servers to bypass the Same Origin Policy and conduct cross-site scripting attacks via unknown vectors, related to a user's visit to a different web server that hosts an SVG document.

← Browse all CVEs View on cve.org ↗