CVE:CVE-2009-3263
CNNVD:CNNVD-200909-380
Google Chrome是Google发布的开源WEB浏览器。
Chrome中的多个安全漏洞可能允许恶意用户执行跨站脚本攻击。
Chrome内嵌的RSS/ATOM阅读器渲染了RSS/ATOM源中不可信任的JavaScript，如果用户受骗订阅了恶意源就可能导致注入并执行任意HTML和脚本代码。
solution:Upgrade google chrome to a higher version than 2.0.156.1,2.0.157.0,2.0.157.2,2.0.158.0,2.0.159.0,2.0.169.0,2.0.169.1,2.0.170.0,2.0.172,2.0.172.2,2.0.172.8,2.0.172.27,2.0.172.28,2.0.172.30,2.0.172.31,2.0.172.33,2.0.172.37,2.0.172.38,3.0.182.2,3.0.190.2,3.0.193.2:beta,and avoid the version 2.0.156.1,2.0.157.0,2.0.157.2,2.0.158.0,2.0.159.0,2.0.169.0,2.0.169.1,2.0.170.0,2.0.172,2.0.172.2,2.0.172.8,2.0.172.27,2.0.172.28,2.0.172.30,2.0.172.31,2.0.172.33,2.0.172.37,2.0.172.38,3.0.182.2,3.0.190.2,3.0.193.2:beta