Google Chrome Cross Site Scripting Filter Security Bypass Vulnerability

Bugtraq ID:	47996
Class:	Origin Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 26 2011 12:00AM
Updated:	May 26 2011 12:00AM
Credit:	Manuel Fernandez
Vulnerable:	Google Chrome 11.0.696.71 Google Chrome 11.0.696.68 Google Chrome 11.0.696.65 Google Chrome 11.0.696.57 Google Chrome 11.0.696.43 Google Chrome 11.0.696.43 Google Chrome 11.0.672.2 Google Chrome 11
Not Vulnerable:

Google Chrome Cross Site Scripting Filter Security Bypass Vulnerability

Google Chrome is prone to a security-bypass vulnerability.

An attacker can exploit this vulnerability to bypass the cross-site scripting filter. Successful exploits may allow attackers to execute arbitrary script code and steal cookie-based authentication credentials.

This issue only affects Google Chrome 11.

Google Chrome Cross Site Scripting Filter Security Bypass Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

Google Chrome Cross Site Scripting Filter Security Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Chrome Cross Site Scripting Filter Security Bypass Vulnerability

References:

• Chrome 11 Anti-XSS ByPass (Computer Security Blog)
  
• Google Chrome Homepage (Google)