← Database

CVE-2010-0661

MEDIUM CVSS: 6.8 Published: 2010-02-18 Modified: 2026-06-16

Description

WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method.

Affected Platforms

Google ChromeApple Webkit

Weakness Type

CWE-264

References