Launchpad.net

CVE 2011-3964

Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remote attackers to spoof the URL bar via unspecified vectors.

See the CVE page on Mitre.org for more details.