Description
Cross-domain vulnerability in the V8 JavaScript engine in Google Chrome before 1.0.154.46 allows remote attackers to bypass the Same Origin Policy via a crafted script that accesses another frame and reads its full URL and possibly other sensitive information, or modifies the URL of this frame.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://googlechromereleases.blogspot.com/2009/01/stable-beta-update-yahoo-mail-and.html ↗
- http://src.chromium.org/viewvc/chrome?view=rev&revision=8524 ↗
- http://secunia.com/advisories/33754 ↗
- http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes ↗
- http://codereview.chromium.org/18531 ↗