CVE-2011-3887

2011-10-2500:00:00

ubuntu.com

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.3%

JSON

Google Chrome before 15.0.874.102 does not properly handle javascript:
URLs, which allows remote attackers to bypass intended access restrictions
and read cookies via unspecified vectors.

Bugs

<http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html>

Notes

Author	Note
jdstrand	qt4-x11 unmaintained upstream (see README.webkit for details)

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchchromium-browser< 23.0.1271.97-0ubuntu0.10.04.1UNKNOWN
ubuntu11.10noarchchromium-browser< 23.0.1271.97-0ubuntu0.11.10.1UNKNOWN