Description
Google Chrome before 10.0.648.127 does not prevent (1) navigation and (2) close operations on the top location of a sandboxed frame, which has unspecified impact and remote attack vectors.
References
- chrome-sandboxed-sec-bypass(65948) vdb-entry
- 46785 vdb-entry
- oval:org.mitre.oval:def:14349 vdb-entry signature
- http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html
- http://code.google.com/p/chromium/issues/detail?id=42574
- http://code.google.com/p/chromium/issues/detail?id=42765
- ADV-2011-0628 vdb-entry