CVE-2011-3956 in Chrome

Resumen (Inglés)

The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

2011-10-01

Divulgación

2012-02-08

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
4605	Google Chrome Sandbox escalada de privilegios	264	No está definido	Arreglo oficial	CVE-2011-3956

Fuentes

• MITRE
• NVD
• CVE Details