PT-2013-3822
CVE-2013-2493
·
تاريخ النشر
2013-03-07
·
تاريخ التحديث
2013-03-08
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Google Chrome Frame plugin versions prior to 26.0.1410.28
Description
The issue is related to the Hook Terminate function in the Google Chrome Frame plugin, which does not properly handle attach tab requests. This allows user-assisted remote attackers to cause a denial of service, resulting in an application crash. The attack can be performed via an blank value for the
target attribute of an A element.Recommendations
For Google Chrome Frame plugin versions prior to 26.0.1410.28, update to version 26.0.1410.28 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾