CVE:CVE-2010-2301
CNNVD:CNNVD-201006-261
Google Chrome是Google发布的开源WEB浏览器。
使用在Google Chrome中WebKit的WebCore的editing/markup.cpp存在多个跨站脚本攻击漏洞。远程攻击者可以借助与TEXTAREA元素的node.innerHTML属性相关的向量注入任意的web脚本和HTML。
solution:Upgrade google chrome to a higher version than 5.0.375.70,and avoid the version (,5.0.375.70); Upgrade opensuse opensuse to a higher version than 11.2,11.3,and avoid the version 11.2,11.3; Upgrade suse suse_linux_enterprise_desktop to a higher version than 10:sp3,11:sp1,and avoid the version 10:sp3,11:sp1; Upgrade suse suse_linux_enterprise_server to a higher version than 10:sp3,11:sp1,and avoid the version 10:sp3,11:sp1