medium6.8
CVE-2011-3956
The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the S…
Impact
The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | before 17.0.963.46 |
Weakness classification
References
- NVD record
- CVE.org record
- http://code.google.com/p/chromium/issues/detail?id=103630
- http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14906
- http://code.google.com/p/chromium/issues/detail?id=103630
- http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14906