Name | CVE-2009-1414 |
Description | Google Chrome 2.0.x lets modifications to the global object persist across a page transition, which makes it easier for attackers to conduct Universal XSS attacks via unspecified vectors. |
Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
The information below is based on the following data on fixed versions.
Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
---|---|---|---|---|---|---|
chromium-browser | source | (unstable) | (not affected) | |||
webkit | source | (unstable) | (not affected) |
- chromium-browser <not-affected> (Only 2.x is affected)
- webkit <not-affected> (doesn't have a 'chromehtml' handler)