Candidate: CVE-2012-2872 PublicDate: 2012-08-31 19:55:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2872 http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html Description: Cross-site scripting (XSS) vulnerability in an SSL interstitial page in Google Chrome before 21.0.1180.89 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Ubuntu-Description: Notes: Bugs: http://code.google.com/p/chromium/issues/detail?id=142956 Priority: medium Discovered-by: Emmanuel Bronshtein Assigned-to: CVSS: Patches_chromium-browser: upstream_chromium-browser: released (21.0.1180.89~r154005-1) hardy_chromium-browser: DNE lucid_chromium-browser: released (3.0.1271.97-0ubuntu0.10.04.1) natty_chromium-browser: ignored (reached end-of-life) oneiric_chromium-browser: released (3.0.1271.97-0ubuntu0.11.10.1) precise_chromium-browser: released (3.0.1271.97-0ubuntu0.12.04.1) quantal_chromium-browser: released (3.0.1271.97-0ubuntu0.12.10.1) devel_chromium-browser: not-affected (22.0.1229.79~r158531-0ubuntu1)