CVE-2011-0778

critical

Description

Google Chrome before 9.0.597.84 does not properly restrict drag and drop operations, which might allow remote attackers to bypass the Same Origin Policy via unspecified vectors.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14228

http://www.vupen.com/english/advisories/2011/0408

http://www.debian.org/security/2011/dsa-2188

http://www.debian.org/security/2011/dsa-2166

http://secunia.com/advisories/43368

http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html

http://googlechromereleases.blogspot.com/2011/02/stable-channel-update.html

http://code.google.com/p/chromium/issues/detail?id=59081

Details

Source: Mitre, NVD

Published: 2011-02-04

Updated: 2017-09-19

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

Detections

Analytics