Google Chrome for iOS 'document.write' Cross Domain Scripting Vulnerability

Bugtraq ID:	64738
Class:	Origin Validation Error
CVE:	CVE-2012-2899
Remote:	Yes
Local:	No
Published:	Sep 24 2012 12:00AM
Updated:	Sep 24 2012 12:00AM
Credit:	Lukasz Pilorz
Vulnerable:	Google Chrome for iOS 21.0.1180.80
Not Vulnerable:	Google Chrome for iOS 21.0.1180.82

Google Chrome for iOS 'document.write' Cross Domain Scripting Vulnerability

Google Chrome for iOS is prone to a cross-domain scripting vulnerability because the application fails to properly enforce the same-origin policy.

Successful exploits will allow attackers to execute arbitrary script code within the context of the affected domain.

Versions prior to Chrome for iOS 21.0.1180.82 are vulnerable.

Google Chrome for iOS 'document.write' Cross Domain Scripting Vulnerability

To exploit this issue, an attacker must entice an unsuspecting victim into visiting a malicious webpage.

Google Chrome for iOS 'document.write' Cross Domain Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google Chrome for iOS 'document.write' Cross Domain Scripting Vulnerability

References:

• Chrome for iOS Update 21.0.1180.82 (Google)
  
• Google Chrome Homepage (Google)
  
• Security: UXSS/SOP bypass with document.write (Chrome on iOS) (Google)