Description
Cross-site scripting (XSS) vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to inject arbitrary web script or HTML via vectors related to a chrome://downloads URI.
References
- 63998 vdb-entry
- 39603 vdb-entry
- 39544 third-party-advisory
- http://googlechromereleases.blogspot.com/2010/04/stable-update-security-fixes.html
- 39669 vdb-entry
- http://bugs.chromium.org/40138
- oval:org.mitre.oval:def:11418 vdb-entry signature