CVE-2011-3067 Security feature bypass in n/a

Medium 6.8 Published 5 Apr 2012 Updated 6 Aug 2024

Remote attackers can bypass the Same Origin Policy in Google Chrome by exploiting IFRAME element replacement vectors, requiring user interaction.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2011-3067?

CVE-2011-3067 is a medium-severity vulnerability in Apple Iphone Os, published on 5 Apr 2012. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements.

Weakness: CWE-346

Which versions are affected by CVE-2011-3067?

It affects 3 products.

Products include Apple Iphone Os, Apple Safari, Google Chrome.

How do I fix CVE-2011-3067?

Upgrade to a fixed version.

Is CVE-2011-3067 being exploited?

There is no known exploitation of CVE-2011-3067 in the wild and no public exploit code.

All Apple Iphone Os vulnerabilities

Sources

Also known as GHSA-g4mm-pj52-rmhj.