CVE-2009-0276

Cross-domain vulnerability in the V8 JavaScript engine in Google Chrome before 1.0.154.46 allows remote attackers to bypass the Same Origin Policy via a crafted script that accesses another frame and reads its full URL and possibly other sensitive information, or modifies the URL of this frame.

Date published : 2009-02-03

http://codereview.chromium.org/18531

http://googlechromereleases.blogspot.com/2009/01/stable-beta-update-yahoo-mail-and.html