CVE-2014-1747: XSS
Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content, aka "Universal XSS (UXSS)."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1747?
CVE-2014-1747 is classified as a high severity vulnerability due to its potential to allow remote code execution through Cross-site scripting.
How do I fix CVE-2014-1747?
The recommended fix for CVE-2014-1747 is to update Google Chrome to version 35.0.1916.114 or later.
Who is affected by CVE-2014-1747?
CVE-2014-1747 affects Google Chrome versions prior to 35.0.1916.114.
What type of vulnerability is CVE-2014-1747?
CVE-2014-1747 is a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web scripts.
What can attackers achieve using CVE-2014-1747?
Attackers can exploit CVE-2014-1747 to execute arbitrary HTML or web scripts in the context of a user's browsing session.