CVE-2011-1187

Google Chrome < 10.0.648.127 - Same Origin Policy Bypass via Error Message Leak

Title source: llm
STIX 2.1

Description

Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."

References (11)

Core 11
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/46785
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/65951
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/49055
Third Party Advisory x_refsource_confirm
http://www.mozilla.org/security/announce/2012/mfsa2012-32.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48972
Exploit, Issue Tracking, Third Party Advisory x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=624621
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/49047
Exploit, Issue Tracking, Vendor Advisory x_refsource_confirm
http://code.google.com/p/chromium/issues/detail?id=69187
Permissions Required vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0628

Scores

EPSS 0.0166
EPSS Percentile 73.9%

Details

CWE
CWE-200
Status published
Products (4)
google/chrome < 10.0.648.127
mozilla/firefox < 12.0
mozilla/seamonkey < 2.9
mozilla/thunderbird < 12.0
Published Mar 11, 2011
Tracked Since Feb 18, 2026