Google Chrome Cross Site Scripting Filter Security Bypass Vulnerability
Gravedad: Crítico
Fecha recomendada: 21 de julio de 2015
Descripción
A policy bypass vulnerability exists in Google Chrome. The vulnerability is due a design weakness in Chrome XSSAuditor. By inserting JavaScript in the srcdoc attribute of an IFRAME tag, the Cross-Site Scripting filter can be bypassed.
Revelación de la información
Apply associated Trend Micro DPI Rules.
Soluciones
Trend Micro Deep Security DPI Rule Number: 1006212
Trend Micro Deep Security DPI Rule Name: 1006212 - Google Chrome Cross Site Scripting Filter Security Bypass Vulnerability
Software y versión afectados
- Google Chrome