The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Chrome
Published: 2012-02-09T02:00:00
Updated: 2024-08-06T23:53:32.236Z
Reserved: 2011-10-01T00:00:00
Link: CVE-2011-3956
Vulnrichment
No data.
NVD
Status : Modified
Published: 2012-02-09T04:10:28.580
Modified: 2024-11-21T01:31:35.753
Link: CVE-2011-3956
Redhat
No data.