Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2013-2493
HistoryMar 07, 2013 - 4:55 p.m.

CVE-2013-2493

2013-03-0716:55:01
CWE-119
mitre
web.nvd.nist.gov
34
cve-2013-2493
hook_terminate function
chrome_frame
protocol_sink_wrap
denial of service
application crash
user-assisted
remote attackers

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.6

Confidence

High

EPSS

0.014

Percentile

86.7%

JSON

The Hook_Terminate function in chrome_frame/protocol_sink_wrap.cc in the Google Chrome Frame plugin before 26.0.1410.28 for Internet Explorer does not properly handle attach tab requests, which allows user-assisted remote attackers to cause a denial of service (application crash) via an _blank value for the target attribute of an A element.

Affected configurations

Nvd
Node
googlechrome_frameRange≤26.0.1410.27
OR
googlechrome_frameMatch15.0.874.121
OR
googlechrome_frameMatch16.0.912.63
VendorProductVersionCPE
googlechrome_frame*cpe:2.3:a:google:chrome_frame:*:*:*:*:*:*:*:*
googlechrome_frame15.0.874.121cpe:2.3:a:google:chrome_frame:15.0.874.121:*:*:*:*:*:*:*
googlechrome_frame16.0.912.63cpe:2.3:a:google:chrome_frame:16.0.912.63:*:*:*:*:*:*:*

Related

nessus 1
cvelist 1
openvas 2
prion 1
nvd 1
nessus
nessus
Google Chrome Frame < 26.0.1410.28 Denial of Service
2013-03-28 00:00:00
cvelist
cvelist
CVE-2013-2493
2013-03-07 16:00:00
openvas
openvas
Google Chrome Frame Plugin For Microsoft IE Denial Of Service Vulnerability - Windows
2013-04-02 00:00:00
Google Chrome Frame Plugin For Microsoft IE Denial Of Service Vulnerability (Windows)
2013-04-02 00:00:00
prion
prion
Code injection
2013-03-07 16:55:00
nvd
nvd
CVE-2013-2493
2013-03-07 16:55:01

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.6

Confidence

High

EPSS

0.014

Percentile

86.7%

JSON
Related for CVE-2013-2493
nessus1cvelist1openvas2prion1nvd1