FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2011-3084

This CVE name corresponds to:

Entered	Topic
2012-05-15	chromium -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2011-3084 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2011-3084
Phase	Assigned(20110809)

Description

Google Chrome before 19.0.1084.46 does not use a dedicated process for the loading of links found on an internal page, which might allow attackers to bypass intended sandbox restrictions via a crafted page.

References

Source	Reference
CONFIRM	http://code.google.com/p/chromium/issues/detail?id=113496
CONFIRM	http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html
GENTOO	GLSA-201205-03
SUSE	openSUSE-SU-2012:0993
BID	53540
OVAL	oval:org.mitre.oval:def:15223
SECTRACK	1027067