SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2011-1190

The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE

Reference:

BID-46785

ADV-2011-0628

APPLE-SA-2011-07-20-1

APPLE-SA-2011-10-12-1

google-chrome-info-disc(65954)

http://code.google.com/p/chromium/issues/detail?id=70336

http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html

http://support.apple.com/kb/HT4808

http://support.apple.com/kb/HT4999

oval:org.mitre.oval:def:14398


30479



423868



248038



909



194772



282