Google Chrome prior to 18.0.1025308 on Android allows remote malicious users to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink.
source: wwwsecurityfocuscom/bid/55523/info
Google Chrome for Android is prone to multiple vulnerabilities
Attackers may exploit these issues to execute arbitrary code in the context of the browser, obtain potentially sensitive information, bypass the same-origin policy, and steal cookie-based authentication credentials; other atta ...
Chrome for Android's Same-Origin Policy for local files (file: URI) can be bypassed by using symbolic links It results in theft of Chrome's private files by malicious Android applications Version 1801025308 was released to address this vulnerability ...
Vulmon