PT-2011-4119 · Google · Google Chrome

Sergey Glazunov · Published 2011-08-02 · Updated 2020-05-19 · CVE-2011-2819

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 13.0.782.107

Description The issue allows remote attackers to bypass the Same Origin Policy via vectors related to handling of the base URI.

Recommendations For versions prior to 13.0.782.107, update to version 13.0.782.107 or later to resolve the issue.

Fix

Related Identifiers

CVE-2011-2819

Affected Products

Google Chrome

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2011-2819 · Security Note
• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html · Vendor Advisory
• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13716 · Note
• https://crbug.com/90222 · Note
• http://code.google.com/p/chromium/issues/detail?id=90222 · Note
• https://chromereleases.googleblog.com/2011/08/stable-channel-update.html · Note
• http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html · Note
• http://support.apple.com/kb/HT4999 · Note
• http://support.apple.com/kb/HT5000 · Note
• http://osvdb.org/74258 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68969 · Note