CVE-2011-1190

NameCVE-2011-1190
DescriptionThe Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
ReferencesDSA-2189-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
chromium-browser (PTS)jessie, jessie (lts)57.0.2987.98-1~deb8u1fixed
stretch (security), stretch (lts), stretch71.0.3578.80-1~deb9u1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
chromium-browsersourcesqueeze6.0.472.63~r59945-5+squeeze3DSA-2189-1
chromium-browsersourcewheezy6.0.472.63~r59945-5+squeeze4
chromium-browsersource(unstable)10.0.648.127~r76697-1

Notes

http://trac.webkit.org/changeset/77563
Search for package or bug name: Reporting problems