CVE-2009-3264
- State
- Published
- Severity
- Not scored
- Published
- Sep 18, 2009
- Updated
- Aug 7, 2024
- Reserved
- Sep 18, 2009
Description
The getSVGDocument method in Google Chrome before 3.0.195.21 omits an unspecified "access check," which allows remote web servers to bypass the Same Origin Policy and conduct cross-site scripting attacks via unknown vectors, related to a user's visit to a different web server that hosts an SVG document.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 58193vdb-entry
- 36416vdb-entry
- http://googlechromereleases.blogspot.com/2009/09/stable-channel-update.html
- 36770third-party-advisory
- http://code.google.com/p/chromium/issues/detail?id=21338
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.