CVE-2011-3067

Google Chrome < 18.0.1025.151 - Origin Validation Error

Title source: rule

Description

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements.

References (14)

[Exploit, Vendor Advisory] http://code.google.com/p/chromium/issues/detail?id=117583

[Release Notes, Vendor Advisory] http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html

[Mailing List, Third Party Advisory] http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html

[Mailing List, Third Party Advisory] http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html

[Broken Link] http://osvdb.org/81037

[Third Party Advisory] http://secunia.com/advisories/48732

[Third Party Advisory] http://secunia.com/advisories/48749

[Third Party Advisory] http://security.gentoo.org/glsa/glsa-201204-03.xml

[Third Party Advisory] http://support.apple.com/kb/HT5400

[Third Party Advisory] http://support.apple.com/kb/HT5503

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/52913

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1026892

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/74627

[Third Party Advisory] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15342

Scores

EPSS 0.0051

EPSS Percentile 66.0%

Classification

CWE

CWE-346

Status draft

Affected Products (3)

google/chrome < 18.0.1025.151

apple/safari < 6.0

apple/iphone_os < 6.0

Timeline

Published Apr 05, 2012

Tracked Since Feb 18, 2026