CVE-2011-3067 — Origin Validation Error in Google Chrome

CWE-346 — Origin Validation Error5 documents4 sources
Severity
6.8MEDIUMNVD
EPSS
0.5%
top 33.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple Iphone OSApple SafariGoogle Chrome
Timeline
PublishedApr 5
Latest updateMay 13

Description

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages3 packages

▶NVDgoogle/chrome< 18.0.1025.151
▶NVDapple/safari< 6.0
▶NVDapple/iphone_os< 6.0

🔴Vulnerability Details

1
GHSA
GHSA-g4mm-pj52-rmhj: Google Chrome before 18↗2022-05-13
▶

📋Vendor Advisories

2
Ubuntu
WebKit vulnerabilities↗2012-10-25
▶
Ubuntu
WebKit vulnerabilities↗2012-08-08
▶