CVE:CVE-2012-5851
CNNVD:CNNVD-201211-284
WebKit是KDE、苹果（Apple）、谷歌（Google）等公司共同开发的一套开源Web浏览器引擎，目前被Apple Safari及Google Chrome等浏览器使用。
使用在Google Chrome 22和Safari 5.1.7版本中WebKit中的WebCore中的html/parser/XSSAuditor.cpp中存在漏洞，该漏洞源于没有考虑所有可能输出反射数据的内容。远程攻击者利用该漏洞通过特制的字符串绕过跨站脚本保护机制。
solution:Upgrade apple webkit to a higher version than *; Upgrade google chrome to a higher version than 22.0.1229.96,22.0.1229.0,22.0.1229.1,22.0.1229.2,22.0.1229.3,22.0.1229.4,22.0.1229.6,22.0.1229.7,22.0.1229.8,22.0.1229.9,22.0.1229.10,22.0.1229.11,22.0.1229.12,22.0.1229.14,22.0.1229.16,22.0.1229.17,22.0.1229.18,22.0.1229.20,22.0.1229.21,22.0.1229.22,22.0.1229.23,22.0.1229.24,22.0.1229.25,22.0.1229.26,22.0.1229.27,22.0.1229.28,22.0.1229.29,22.0.1229.31,22.0.1229.32,22.0.1229.33,22.0.1229.35,22.0.1229.36,22.0.1229.37,22.0.1229.39,22.0.1229.48,22.0.1229.49,22.0.1229.50,22.0.1229.51,22.0.1229.52,22.0.1229.53,22.0.1229.54,22.0.1229.55,22.0.1229.56,22.0.1229.57,22.0.1229.58,22.0.1229.59,22.0.1229.60,22.0.1229.62,22.0.1229.63,22.0.1229.64,22.0.1229.65,22.0.1229.67,22.0.1229.76,22.0.1229.78,22.0.1229.79,22.0.1229.89,22.0.1229.91,22.0.1229.92,22.0.1229.94,22.0.1229.95,and avoid the version (,22.0.1229.96],22.0.1229.0,22.0.1229.1,22.0.1229.2,22.0.1229.3,22.0.1229.4,22.0.1229.6,22.0.1229.7,22.0.1229.8,22.0.1229.9,22.0.1229.10,22.0.1229.11,22.0.1229.12,22.0.1229.14,22.0.1229.16,22.0.1229.17,22.0.1229.18,22.0.1229.20,22.0.1229.21,22.0.1229.22,22.0.1229.23,22.0.1229.24,22.0.1229.25,22.0.1229.26,22.0.1229.27,22.0.1229.28,22.0.1229.29,22.0.1229.31,22.0.1229.32,22.0.1229.33,22.0.1229.35,22.0.1229.36,22.0.1229.37,22.0.1229.39,22.0.1229.48,22.0.1229.49,22.0.1229.50,22.0.1229.51,22.0.1229.52,22.0.1229.53,22.0.1229.54,22.0.1229.55,22.0.1229.56,22.0.1229.57,22.0.1229.58,22.0.1229.59,22.0.1229.60,22.0.1229.62,22.0.1229.63,22.0.1229.64,22.0.1229.65,22.0.1229.67,22.0.1229.76,22.0.1229.78,22.0.1229.79,22.0.1229.89,22.0.1229.91,22.0.1229.92,22.0.1229.94,22.0.1229.95; Upgrade apple safari to a higher version than 5.1.7,and avoid the version 5.1.7