Launchpad.net

CVE 2011-3056

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."

See the CVE page on Mitre.org for more details.