CVEvulnerability
CVE-2011-1190
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-03-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."
Affected configurations
• google chrome (< 10.0.648.127)
• apple safari (< 5.0.6)
• apple iphone os (< 5.0)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://code.google.com/p/chromium/issues/detail?id=70336 Exploit, Issue Tracking, Patch, Vendor Advisory
- http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html Vendor Advisory
- http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html Mailing List, Third Party Advisory
- http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html Mailing List, Third Party Advisory
- http://support.apple.com/kb/HT4808 Third Party Advisory
- http://support.apple.com/kb/HT4999 Third Party Advisory
- http://www.securityfocus.com/bid/46785 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2011/0628 Permissions Required
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65954 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14398 Third Party Advisory
- http://code.google.com/p/chromium/issues/detail?id=70336 Exploit, Issue Tracking, Patch, Vendor Advisory
- http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html Vendor Advisory
- http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html Mailing List, Third Party Advisory
- http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html Mailing List, Third Party Advisory
- http://support.apple.com/kb/HT4808 Third Party Advisory
- http://support.apple.com/kb/HT4999 Third Party Advisory
- http://www.securityfocus.com/bid/46785 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2011/0628 Permissions Required
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65954 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14398 Third Party Advisory