Google Chrome Cross-Origin Resource Sharing Security Bypass
SECUNIA ADVISORY ID: SA37358
VERIFY ADVISORY: http://secunia.com/advisories/37358/
DESCRIPTION: A security issue has been reported in Google Chrome, which can be exploited by malicious people to bypass certain security restrictions.
The security issue is caused due to Cross-Origin Resource Sharing OPTIONS requests including custom HTTP headers and can be exploited to facilitate cross-site request forgery attacks.
This is related to vulnerability #3 in: SA37346
The security issue is reported in versions prior to 3.0.195.33.
SOLUTION: Update to version 3.0.195.33.
PROVIDED AND/OR DISCOVERED BY: The vendor credits Apple Security.
ORIGINAL ADVISORY: http://googlechromereleases.blogspot.com/2009/11/stable-update-fix-google-chrome-not.html
OTHER REFERENCES: SA37346: http://secunia.com/advisories/37346/
———————————————————————-