CVE

Id
62440  
CVE No.
CVE-2013-2493  
Status
Candidate  
Description
The Hook_Terminate function in chrome_frame/protocol_sink_wrap.cc in the Google Chrome Frame plugin before 26.0.1410.28 for Internet Explorer does not properly handle attach tab requests, which allows user-assisted remote attackers to cause a denial of service (application crash) via an _blank value for the target attribute of an A element.  
Phase
Assigned (20130307)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
625293 62440 CVE-2013-2493 CONFIRM:http://googlechromereleases.blogspot.com/2013/03/beta-channel-update.html  View
625294 62440 CVE-2013-2493 CONFIRM:http://src.chromium.org/viewvc/chrome/trunk/src/chrome_frame/protocol_sink_wrap.cc?r1=185956&r2=185955&pathrev=185956  View
625295 62440 CVE-2013-2493 CONFIRM:http://src.chromium.org/viewvc/chrome?view=rev&revision=185956  View
625296 62440 CVE-2013-2493 CONFIRM:https://chromiumcodereview.appspot.com/12395021  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24519 JVNDB-2013-006094 SimpleHRM の flexycms/modules/user/user_manager.php のログインページにおける SQL インジェクションの脆弱性 SimpleHRM の flexycms/modules/user/user_manager.php のログインページには、SQL インジェクションの脆弱性が存在します。 CVE-2013-2498 62440 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006094.html  View