NVD

Id
10510  
Name
CVE-2011-3956  
Description
The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2012-02-08  
Modified Date
2016-10-05  
Seq
2011-3956  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
59589 10510 CVE-2011-3956 http://code.google.com/p/chromium/issues/detail?id=103630  View
59590 10510 CVE-2011-3956 http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html  View
59591 10510 CVE-2011-3956 oval:org.mitre.oval:def:14906  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25652 JVNDB-2012-001359 Google Chrome の拡張機能の実装における同一生成元ポリシーを回避される脆弱性 Google Chrome の拡張機能の実装は、sandboxed origins を適切に処理しないため、同一生成元ポリシー (Same origin policy) を回避される脆弱性が存在します。 CVE-2011-3956 51863 CVE-2011-3956 10510 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001359.html 2012-02-08 2012-02-13 View