Candidate: CVE-2011-3054 PublicDate: 2012-03-22 16:55:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3054 http://googlechromereleases.blogspot.com/2012/03/stable-channel-update_21.html http://code.google.com/p/chromium/issues/detail?id=117418 Description: The WebUI privilege implementation in Google Chrome before 17.0.963.83 does not properly perform isolation, which allows remote attackers to bypass intended access restrictions via unspecified vectors. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_chromium-browser: upstream_chromium-browser: released (17.0.963.83) hardy_chromium-browser: DNE lucid_chromium-browser: released (18.0.1025.151~r130497-0ubuntu0.10.04.1) maverick_chromium-browser: released (18.0.1025.151~r130497-0ubuntu0.10.10.1) natty_chromium-browser: released (18.0.1025.142~r129054-0ubuntu0.11.04.1) oneiric_chromium-browser: released (18.0.1025.142~r129054-0ubuntu0.11.10.1) devel_chromium-browser: released (17.0.963.83~r127885-0ubuntu1)