CVE-2011-1190

Опубликовано: 11 мар. 2011

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."

Ссылки

http://code.google.com/p/chromium/issues/detail?id=70336
Exploit
Issue Tracking
Patch
Vendor Advisory
http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html
Vendor Advisory
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
Mailing List
Third Party Advisory
http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
Mailing List
Third Party Advisory
http://support.apple.com/kb/HT4808
Third Party Advisory
http://support.apple.com/kb/HT4999
Third Party Advisory
http://www.securityfocus.com/bid/46785
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2011/0628
Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/65954
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14398
Third Party Advisory
http://code.google.com/p/chromium/issues/detail?id=70336
Exploit
Issue Tracking
Patch
Vendor Advisory
http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html
Vendor Advisory
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
Mailing List
Third Party Advisory
http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
Mailing List
Third Party Advisory
http://support.apple.com/kb/HT4808
Third Party Advisory
http://support.apple.com/kb/HT4999
Third Party Advisory
http://www.securityfocus.com/bid/46785
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2011/0628
Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/65954
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14398
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Версия до 10.0.648.127 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 5.0.6 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 5.0 (исключая)

EPSS

Процентиль: 71%

0.00674

Низкий

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2011-1190

ubuntu

почти 15 лет назад

The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."

CVE-2011-1190

debian

почти 15 лет назад

The Web Workers implementation in Google Chrome before 10.0.648.127 al ...

GHSA-5pwj-4r4w-6355

github

больше 3 лет назад

The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."

EPSS

Процентиль: 71%

0.00674

Низкий

5 Medium

CVSS2

Дефекты

CWE-200