Description
Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handling of the base URI.
References
- http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html
- APPLE-SA-2011-10-12-1 vendor-advisory
- http://code.google.com/p/chromium/issues/detail?id=90222
- 74258 vdb-entry
- APPLE-SA-2011-10-12-4 vendor-advisory
- http://support.apple.com/kb/HT4999
- oval:org.mitre.oval:def:13716 vdb-entry signature
- http://support.apple.com/kb/HT5000
- google-chrome-uri-security-bypass(68969) vdb-entry