Launchpad.net

CVE 2011-1815

Google Chrome before 12.0.742.91 allows remote attackers to inject script into a tab page via vectors related to extensions.

See the CVE page on Mitre.org for more details.