The Google URL Parsing Library (aka google-url or GURL) in Google Chrome before 4.1.249.1064 allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Chrome | * | 4.1.249.1063 (including) | |
| Chrome | 0.2.149.27 (including) | 0.2.149.27 (including) | |
| Chrome | 0.2.149.29 (including) | 0.2.149.29 (including) | |
| Chrome | 0.2.149.30 (including) | 0.2.149.30 (including) | |
| Chrome | 0.2.152.1 (including) | 0.2.152.1 (including) | |
| Chrome | 0.2.153.1 (including) | 0.2.153.1 (including) | |
| Chrome | 0.3.154.0 (including) | 0.3.154.0 (including) | |
| Chrome | 0.3.154.3 (including) | 0.3.154.3 (including) | |
| Chrome | 0.4.154.18 (including) | 0.4.154.18 (including) | |
| Chrome | 0.4.154.22 (including) | 0.4.154.22 (including) | |
| Chrome | 0.4.154.31 (including) | 0.4.154.31 (including) | |
| Chrome | 0.4.154.33 (including) | 0.4.154.33 (including) | |
| Chrome | 1.0.154.36 (including) | 1.0.154.36 (including) | |
| Chrome | 1.0.154.39 (including) | 1.0.154.39 (including) | |
| Chrome | 1.0.154.42 (including) | 1.0.154.42 (including) | |
| Chrome | 1.0.154.43 (including) | 1.0.154.43 (including) | |
| Chrome | 1.0.154.46 (including) | 1.0.154.46 (including) | |
| Chrome | 1.0.154.48 (including) | 1.0.154.48 (including) | |
| Chrome | 1.0.154.52 (including) | 1.0.154.52 (including) | |
| Chrome | 1.0.154.53 (including) | 1.0.154.53 (including) | |
| Chrome | 1.0.154.59 (including) | 1.0.154.59 (including) | |
| Chrome | 1.0.154.64 (including) | 1.0.154.64 (including) | |
| Chrome | 1.0.154.65 (including) | 1.0.154.65 (including) | |
| Chrome | 2.0.156.1 (including) | 2.0.156.1 (including) | |
| Chrome | 2.0.157.0 (including) | 2.0.157.0 (including) | |
| Chrome | 2.0.157.2 (including) | 2.0.157.2 (including) | |
| Chrome | 2.0.158.0 (including) | 2.0.158.0 (including) | |
| Chrome | 2.0.159.0 (including) | 2.0.159.0 (including) | |
| Chrome | 2.0.169.0 (including) | 2.0.169.0 (including) | |
| Chrome | 2.0.169.1 (including) | 2.0.169.1 (including) | |
| Chrome | 2.0.170.0 (including) | 2.0.170.0 (including) | |
| Chrome | 2.0.172 (including) | 2.0.172 (including) | |
| Chrome | 2.0.172.2 (including) | 2.0.172.2 (including) | |
| Chrome | 2.0.172.8 (including) | 2.0.172.8 (including) | |
| Chrome | 2.0.172.27 (including) | 2.0.172.27 (including) | |
| Chrome | 2.0.172.28 (including) | 2.0.172.28 (including) | |
| Chrome | 2.0.172.30 (including) | 2.0.172.30 (including) | |
| Chrome | 2.0.172.31 (including) | 2.0.172.31 (including) | |
| Chrome | 2.0.172.33 (including) | 2.0.172.33 (including) | |
| Chrome | 2.0.172.37 (including) | 2.0.172.37 (including) | |
| Chrome | 2.0.172.38 (including) | 2.0.172.38 (including) | |
| Chrome | 3.0.182.2 (including) | 3.0.182.2 (including) | |
| Chrome | 3.0.190.2 (including) | 3.0.190.2 (including) | |
| Chrome | 3.0.193.2-beta (including) | 3.0.193.2-beta (including) | |
| Chrome | 3.0.195.2 (including) | 3.0.195.2 (including) | |
| Chrome | 3.0.195.21 (including) | 3.0.195.21 (including) | |
| Chrome | 3.0.195.24 (including) | 3.0.195.24 (including) | |
| Chrome | 3.0.195.25 (including) | 3.0.195.25 (including) | |
| Chrome | 3.0.195.27 (including) | 3.0.195.27 (including) | |
| Chrome | 3.0.195.32 (including) | 3.0.195.32 (including) | |
| Chrome | 3.0.195.33 (including) | 3.0.195.33 (including) | |
| Chrome | 3.0.195.36 (including) | 3.0.195.36 (including) | |
| Chrome | 3.0.195.37 (including) | 3.0.195.37 (including) | |
| Chrome | 3.0.195.38 (including) | 3.0.195.38 (including) | |
| Chrome | 4.1-beta (including) | 4.1-beta (including) | |
| Chrome | 4.1.249.0 (including) | 4.1.249.0 (including) | |
| Chrome | 4.1.249.1001 (including) | 4.1.249.1001 (including) | |
| Chrome | 4.1.249.1004 (including) | 4.1.249.1004 (including) | |
| Chrome | 4.1.249.1006 (including) | 4.1.249.1006 (including) | |
| Chrome | 4.1.249.1007 (including) | 4.1.249.1007 (including) | |
| Chrome | 4.1.249.1008 (including) | 4.1.249.1008 (including) | |
| Chrome | 4.1.249.1009 (including) | 4.1.249.1009 (including) | |
| Chrome | 4.1.249.1010 (including) | 4.1.249.1010 (including) | |
| Chrome | 4.1.249.1011 (including) | 4.1.249.1011 (including) | |
| Chrome | 4.1.249.1012 (including) | 4.1.249.1012 (including) | |
| Chrome | 4.1.249.1013 (including) | 4.1.249.1013 (including) | |
| Chrome | 4.1.249.1014 (including) | 4.1.249.1014 (including) | |
| Chrome | 4.1.249.1015 (including) | 4.1.249.1015 (including) | |
| Chrome | 4.1.249.1016 (including) | 4.1.249.1016 (including) | |
| Chrome | 4.1.249.1017 (including) | 4.1.249.1017 (including) | |
| Chrome | 4.1.249.1018 (including) | 4.1.249.1018 (including) | |
| Chrome | 4.1.249.1019 (including) | 4.1.249.1019 (including) | |
| Chrome | 4.1.249.1020 (including) | 4.1.249.1020 (including) | |
| Chrome | 4.1.249.1021 (including) | 4.1.249.1021 (including) | |
| Chrome | 4.1.249.1022 (including) | 4.1.249.1022 (including) | |
| Chrome | 4.1.249.1023 (including) | 4.1.249.1023 (including) | |
| Chrome | 4.1.249.1024 (including) | 4.1.249.1024 (including) | |
| Chrome | 4.1.249.1025 (including) | 4.1.249.1025 (including) | |
| Chrome | 4.1.249.1026 (including) | 4.1.249.1026 (including) | |
| Chrome | 4.1.249.1027 (including) | 4.1.249.1027 (including) | |
| Chrome | 4.1.249.1028 (including) | 4.1.249.1028 (including) | |
| Chrome | 4.1.249.1029 (including) | 4.1.249.1029 (including) | |
| Chrome | 4.1.249.1030 (including) | 4.1.249.1030 (including) | |
| Chrome | 4.1.249.1031 (including) | 4.1.249.1031 (including) | |
| Chrome | 4.1.249.1032 (including) | 4.1.249.1032 (including) | |
| Chrome | 4.1.249.1033 (including) | 4.1.249.1033 (including) | |
| Chrome | 4.1.249.1034 (including) | 4.1.249.1034 (including) | |
| Chrome | 4.1.249.1035 (including) | 4.1.249.1035 (including) | |
| Chrome | 4.1.249.1036 (including) | 4.1.249.1036 (including) | |
| Chrome | 4.1.249.1042 (including) | 4.1.249.1042 (including) | |
| Chrome | 4.1.249.1045 (including) | 4.1.249.1045 (including) | |
| Chrome | 4.1.249.1046 (including) | 4.1.249.1046 (including) | |
| Chrome | 4.1.249.1047 (including) | 4.1.249.1047 (including) | |
| Chrome | 4.1.249.1048 (including) | 4.1.249.1048 (including) | |
| Chrome | 4.1.249.1049 (including) | 4.1.249.1049 (including) | |
| Chrome | 4.1.249.1050 (including) | 4.1.249.1050 (including) | |
| Chrome | 4.1.249.1051 (including) | 4.1.249.1051 (including) | |
| Chrome | 4.1.249.1052 (including) | 4.1.249.1052 (including) | |
| Chrome | 4.1.249.1053 (including) | 4.1.249.1053 (including) | |
| Chrome | 4.1.249.1054 (including) | 4.1.249.1054 (including) | |
| Chrome | 4.1.249.1055 (including) | 4.1.249.1055 (including) | |
| Chrome | 4.1.249.1056 (including) | 4.1.249.1056 (including) | |
| Chrome | 4.1.249.1057 (including) | 4.1.249.1057 (including) | |
| Chrome | 4.1.249.1058 (including) | 4.1.249.1058 (including) | |
| Chrome | 4.1.249.1059 (including) | 4.1.249.1059 (including) | |
| Chrome | 4.1.249.1060 (including) | 4.1.249.1060 (including) | |
| Chrome | 4.1.249.1061 (including) | 4.1.249.1061 (including) | |
| Chrome | 4.1.249.1062 (including) | 4.1.249.1062 (including) | |
| Chromium-browser | Ubuntu | lucid | * |
| Chromium-browser | Ubuntu | upstream | * |
References
- http://bugs.chromium.org/40445
- http://googlechromereleases.blogspot.com/2010/04/stable-update-bug-and-security-fixes.html
- http://secunia.com/advisories/39651
- http://www.vupen.com/english/advisories/2010/1016
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6813
- http://bugs.chromium.org/40445
- http://googlechromereleases.blogspot.com/2010/04/stable-update-bug-and-security-fixes.html
- http://secunia.com/advisories/39651
- http://www.vupen.com/english/advisories/2010/1016
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6813