Trend Micro Security

Google Chrome Cross Site Scripting Filter Security Bypass Vulnerability

2015年7月21日
  危険度: : 緊急

  概要

A policy bypass vulnerability exists in Google Chrome. The vulnerability is due a design weakness in Chrome XSSAuditor. By inserting JavaScript in the srcdoc attribute of an IFRAME tag, the Cross-Site Scripting filter can be bypassed.

  トレンドマイクロの対策

Apply associated Trend Micro DPI Rules.

  対応方法

  Trend Micro Deep Security DPI Rule Number: 1006212
  Trend Micro Deep Security DPI Rule Name: 1006212 - Google Chrome Cross Site Scripting Filter Security Bypass Vulnerability

  影響を受けるソフトウェア

  • Google Chrome