CVE-2011-3067
Published: 5 April 2012
Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements.
Priority
Status
Package | Release | Status |
---|---|---|
chromium-browser Launchpad, Ubuntu, Debian |
hardy |
Does not exist
|
lucid |
Released
(3.0.1271.97-0ubuntu0.10.04.1)
|
|
maverick |
Released
(18.0.1025.151~r130497-0ubuntu0.10.10.1)
|
|
natty |
Released
(18.0.1025.151~r130497-0ubuntu0.11.04.1)
|
|
oneiric |
Released
(3.0.1271.97-0ubuntu0.11.10.1)
|
|
precise |
Released
(3.0.1271.97-0ubuntu0.12.04.1)
|
|
quantal |
Released
(3.0.1271.97-0ubuntu0.12.10.1)
|
|
raring |
Released
(18.0.1025.151~r130497-0ubuntu1)
|
|
upstream |
Released
(18.0.1025.151~r130497-1)
|
|
webkit Launchpad, Ubuntu, Debian |
hardy |
Ignored
(end of life)
|
lucid |
Ignored
(end of life)
|
|
natty |
Ignored
(end of life)
|
|
oneiric |
Ignored
(end of life)
|
|
precise |
Released
(1.8.3-0ubuntu0.12.04.1)
|
|
quantal |
Not vulnerable
(1.10.0-0ubuntu1)
|
|
raring |
Not vulnerable
(1.10.0-0ubuntu1)
|
|
upstream |
Released
(1.8.2)
|
References
- http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates.html
- http://code.google.com/p/chromium/issues/detail?id=117583
- https://ubuntu.com/security/notices/USN-1524-1
- https://ubuntu.com/security/notices/USN-1617-1
- https://www.cve.org/CVERecord?id=CVE-2011-3067
- NVD
- Launchpad
- Debian