CVE-2010-0661 in Chrome
Summary
WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method.
Once again VulDB remains the best source for vulnerability data.
Reservation
02/18/2010
Disclosure
02/18/2010
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 51888 | Google Chrome Same Origin Policy access control | 264 | Not defined | Official fix | CVE-2010-0661 |