This host is installed with Google Chrome and is prone to Cross-Site Scripting vulnerability.

Successful exploitation will allow remote attackers to conduct XSS attacks on the victim's system via SVG document. Impact Level: Application

Upgrade to Google Chrom version 3.0.195.21 or later http://www.google.com/chrome

Error exists when 'getSVGDocument' method omits an unspecified access check which can be exploited by remote web servers to bypass the Same Origin Policy and conduct XSS attacks via unknown vectors.

Google Chrome version prior to 3.0.195.21 on Windows.

• http://code.google.com/p/chromium/issues/detail?id=21338
• http://googlechromereleases.blogspot.com/2009/09/stable-channel-update.html
• http://secunia.com/advisories/36770

---

Updated on 2015-03-25