Bypassing Same Origin Policy in Google Chrome before 18.0.1025.151 via IFRAME Replacement

Bypassing Same Origin Policy in Google Chrome before 18.0.1025.151 via IFRAME Replacement

CVE-2011-3067 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements.

Learn more about our Cis Benchmark Audit For Google Chrome.