Google Chrome Cross-site Scripting And Information Disclosure

[Peaches]

Google Chrome Cross-Site Scripting and Information Disclosure

Secunia Advisory: 2009-02-02

Critical: Moderately critical Impact: Cross Site Scripting

Exposure of sensitive information

Where: From remote Solution Status: Vendor Patch

Software:Google Chrome 1.x

Subscribe:

CVE reference: Description:

Two vulnerabilities have been reported in Google Chrome, which can be exploited by malicious people to conduct cross-site scripting attacks or to disclose sensitive information.

1) A vulnerability in the Adobe Reader plug-in can be exploited by malicious people to conduct cross-site scripting attacks. More Info. at Secunia: http://secunia.com/advisories/33754/