CVE:CVE-2012-2899
CNNVD:CNNVD-201401-051
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。
基于iOS平台上的Google Chrome 21.0.1180.82之前的版本中存在安全漏洞，该漏洞源于程序没有正确调用WebView方法。远程攻击者可借助‘document.write’方法利用该漏洞绕过同源策略（Same Origin Policy）并实施Universal XSS (UXSS)攻击。
solution:Upgrade google chrome to a higher version than 21.0.1180.81,21.0.1180.0,21.0.1180.1,21.0.1180.2,21.0.1180.31,21.0.1180.32,21.0.1180.33,21.0.1180.34,21.0.1180.35,21.0.1180.36,21.0.1180.37,21.0.1180.38,21.0.1180.39,21.0.1180.41,21.0.1180.46,21.0.1180.47,21.0.1180.48,21.0.1180.49,21.0.1180.50,21.0.1180.51,21.0.1180.52,21.0.1180.53,21.0.1180.54,21.0.1180.55,21.0.1180.56,21.0.1180.57,21.0.1180.59,21.0.1180.60,21.0.1180.61,21.0.1180.62,21.0.1180.63,21.0.1180.64,21.0.1180.68,21.0.1180.69,21.0.1180.70,21.0.1180.71,21.0.1180.72,21.0.1180.73,21.0.1180.74,21.0.1180.75,21.0.1180.76,21.0.1180.77,21.0.1180.78,21.0.1180.79,21.0.1180.80,and avoid the version (,21.0.1180.81],21.0.1180.0,21.0.1180.1,21.0.1180.2,21.0.1180.31,21.0.1180.32,21.0.1180.33,21.0.1180.34,21.0.1180.35,21.0.1180.36,21.0.1180.37,21.0.1180.38,21.0.1180.39,21.0.1180.41,21.0.1180.46,21.0.1180.47,21.0.1180.48,21.0.1180.49,21.0.1180.50,21.0.1180.51,21.0.1180.52,21.0.1180.53,21.0.1180.54,21.0.1180.55,21.0.1180.56,21.0.1180.57,21.0.1180.59,21.0.1180.60,21.0.1180.61,21.0.1180.62,21.0.1180.63,21.0.1180.64,21.0.1180.68,21.0.1180.69,21.0.1180.70,21.0.1180.71,21.0.1180.72,21.0.1180.73,21.0.1180.74,21.0.1180.75,21.0.1180.76,21.0.1180.77,21.0.1180.78,21.0.1180.79,21.0.1180.80