CVE-2008-4724

Google Chrome - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome 0.2.149.30 allow remote attackers to inject arbitrary web script or HTML via an ftp:// URL for an HTML document within a (1) JPG, (2) PDF, or (3) TXT file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References (1)

[Exploit] http://www.securityfocus.com/bid/31855

Scores

EPSS 0.0015

EPSS Percentile 34.8%

Classification

CWE

CWE-79

Status draft

Affected Products (1)

google/chrome

Timeline

Published Oct 23, 2008

Tracked Since Feb 18, 2026