NVD

Id
38552  
Name
CVE-2013-2493  
Description
The Hook_Terminate function in chrome_frame/protocol_sink_wrap.cc in the Google Chrome Frame plugin before 26.0.1410.28 for Internet Explorer does not properly handle attach tab requests, which allows user-assisted remote attackers to cause a denial of service (application crash) via an _blank value for the target attribute of an A element.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-03-07  
Modified Date
2013-03-08  
Seq
2013-2493  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
197777 38552 CVE-2013-2493 http://googlechromereleases.blogspot.com/2013/03/beta-channel-update.html  View
197778 38552 CVE-2013-2493 http://src.chromium.org/viewvc/chrome/trunk/src/chrome_frame/protocol_sink_wrap.cc?r1=185956&r2=185955&pathrev=185956  View
197779 38552 CVE-2013-2493 http://src.chromium.org/viewvc/chrome?view=rev&revision=185956  View
197780 38552 CVE-2013-2493 https://chromiumcodereview.appspot.com/12395021  View
197781 38552 CVE-2013-2493 https://code.google.com/p/chromium/issues/detail?id=178415  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20206 JVNDB-2013-001781 Internet Explorer 用 Google Chrome Frame プラグインにおけるサービス運用妨害 (DoS) の脆弱性 Internet Explorer 用 Google Chrome Frame プラグインの chrome_frame/protocol_sink_wrap.cc 内の Hook_Terminate 関数は、"attach tab" リクエストを適切に処理しないため、サービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2013-2493 62435 CVE-2013-2493 38552 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001781.html 2013-03-06 2013-03-11 View