Input validation error in Google Chrome - CVE-2011-2826

 

Input validation error in Google Chrome - CVE-2011-2826

Published: August 29, 2011 / Updated: August 11, 2020


Vulnerability identifier: #VU44775
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2011-2826
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins.


Affected software

Google Chrome

How to mitigate CVE-2011-2826

Install update from vendor's website.

Google Chrome - update to 13.0.782.215

External References

Related Security Bulletins