Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."
| Software | From | Fixed in |
|---|---|---|
| google / chrome | - | 17.0.963.83 |
| opensuse / opensuse | 12.1 | 12.1.x |
| apple / iphone_os | - | 5.1.1 |
| apple / safari | - | 5.1.7 |