CVE-2011-3072

Google Chrome < 18.0.1025.151 - Origin Validation Error

Title source: rule

Description

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to pop-up windows.

References (10)

[Exploit, Vendor Advisory] http://code.google.com/p/chromium/issues/detail?id=118467

[Release Notes, Vendor Advisory] http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html

[Broken Link] http://osvdb.org/81042

[Third Party Advisory] http://secunia.com/advisories/48732

[Third Party Advisory] http://secunia.com/advisories/48749

[Third Party Advisory] http://security.gentoo.org/glsa/glsa-201204-03.xml

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/52913

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1026892

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/74632

[Third Party Advisory] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15480

Scores

EPSS 0.0036

EPSS Percentile 57.4%

Classification

CWE

CWE-346

Status draft

Affected Products (1)

google/chrome < 18.0.1025.151

Timeline

Published Apr 05, 2012

Tracked Since Feb 18, 2026