CVE-2009-3264

The getSVGDocument method in Google Chrome before 3.0.195.21 omits an unspecified "access check," which allows remote web servers to bypass the Same Origin…

published September 18, 2009

CVSS
—
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

The getSVGDocument method in Google Chrome before 3.0.195.21 omits an unspecified "access check," which allows remote web servers to bypass the Same Origin Policy and conduct cross-site scripting attacks via unknown vectors, related to a user's visit to a different web server that hosts an SVG document.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03497 · 89.0th percentile
Published
2009-09-18T22:00Z
EPSS history
Timeline
  • 18 SEP 22:00Z
    The getSVGDocument method in Google Chrome before 3.0.195.21 omits an unspecified "access check," which allows remote web servers to bypass the Same Origin…
    cvelistv5