• info
• discussion
• exploit
• solution
• references

Google Chrome 'chromehtml:' Protocol Handler Same Origin Policy Bypass Vulnerability

To exploit this issue, an attacker must entice a victim to follow a malicious URL in Internet Explorer.