CVE-2013-2493

🗓️ 07 Mar 2013 16:00:00Reported by mitreType

The Hook_Terminate function in chrome_frame/protocol_sink_wrap.cc in the Google Chrome Frame plugin before 26.0.1410.28 for Internet Explorer does not properly handle attach tab requests, which allows user-assisted remote attackers to cause a denial of service (application crash) via an _blank value for the target attribute of an A element

Reporter	Title	Published	Views	Family All 10
Tenable Nessus	Google Chrome Frame < 26.0.1410.28 DoS	3 May 201300:00	–	nessus
Tenable Nessus	Google Chrome Frame < 26.0.1410.28 Denial of Service	3 May 201300:00	–	nessus
Tenable Nessus	Google Chrome Frame < 26.0.1410.28 Denial of Service	28 Mar 201300:00	–	nessus
Cvelist	CVE-2013-2493	7 Mar 201316:00	–	cvelist
EUVD	EUVD-2013-2439	7 Oct 202500:30	–	euvd
NVD	CVE-2013-2493	7 Mar 201316:55	–	nvd
OpenVAS	Google Chrome Frame Plugin For Microsoft IE Denial Of Service Vulnerability - Windows	2 Apr 201300:00	–	openvas
OpenVAS	Google Chrome Frame Plugin For Microsoft IE Denial Of Service Vulnerability (Windows)	2 Apr 201300:00	–	openvas
Prion	Code injection	7 Mar 201316:55	–	prion
RedhatCVE	CVE-2013-2493	22 May 202511:15	–	redhatcve

NVD

Node

google chrome_frameRange≤26.0.1410.27

google chrome_frameMatch15.0.874.121

google chrome_frameMatch16.0.912.63

Source	Link
src	www.src.chromium.org/viewvc/chrome/trunk/src/chrome_frame/protocol_sink_wrap.cc
src	www.src.chromium.org/viewvc/chrome
chromiumcodereview	www.chromiumcodereview.appspot.com/12395021
googlechromereleases	www.googlechromereleases.blogspot.com/2013/03/beta-channel-update.html
code	www.code.google.com/p/chromium/issues/detail

29 Apr 2026 01:13Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24.3

EPSS0.0083

CWE-119