CVE-2010-0661 | Vulnerability Database | Aqua Security

WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method.

Affected Software

Name	Vendor	Start Version	End Version
Webkit	Apple	52400 (including)	52400 (including)
Qt4-x11	Ubuntu	intrepid	*
Qt4-x11	Ubuntu	jaunty	*
Qt4-x11	Ubuntu	karmic	*
Qt4-x11	Ubuntu	lucid	*

References

http://code.google.com/p/chromium/issues/detail?id=30660
http://flock.com/security/
http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://secunia.com/advisories/43068
http://securitytracker.com/id?1023506
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs
http://trac.webkit.org/changeset/52401
http://www.vupen.com/english/advisories/2011/0212
https://bugs.webkit.org/show_bug.cgi?id=32647
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14482
http://code.google.com/p/chromium/issues/detail?id=30660
http://flock.com/security/
http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://secunia.com/advisories/43068
http://securitytracker.com/id?1023506
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs
http://trac.webkit.org/changeset/52401
http://www.vupen.com/english/advisories/2011/0212
https://bugs.webkit.org/show_bug.cgi?id=32647
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14482

NVD	https://nvd.nist.gov/vuln/detail/CVE-2010-0661
CWE	https://cwe.mitre.org/data/definitions/264.html