PT-2013-6056
CVE-2013-6626
·
Published
2013-11-12
·
Updated
2024-06-15
Description by
CVSS 2.0
4.3
MediumMetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 31.0.1650.48
Description
The issue concerns the WebContentsImpl::AttachInterstitialPage function, which fails to cancel JavaScript dialogs when generating an interstitial warning. This allows remote attackers to spoof the address bar via a crafted web site.
Recommendations
For versions prior to 31.0.1650.48, update to version 31.0.1650.48 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾