Launchpad.net

CVE 2011-3067

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements.

See the CVE page on Mitre.org for more details.