CVE-2011-3056
Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."
Date published : 2012-03-22
http://lists.apple.com/archives/security-announce/2012/May/msg00000.html
http://lists.apple.com/archives/security-announce/2012/May/msg00002.html