Launchpad.net

CVE 2012-5146

Google Chrome before 24.0.1312.52 allows remote attackers to bypass the Same Origin Policy via a malformed URL.

See the CVE page on Mitre.org for more details.