VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 7, 2013· Updated Jun 16, 2026

CVE-2013-2493

CVE-2013-2493

Description

The Hook_Terminate function in chrome_frame/protocol_sink_wrap.cc in the Google Chrome Frame plugin before 26.0.1410.28 for Internet Explorer does not properly handle attach tab requests, which allows user-assisted remote attackers to cause a denial of service (application crash) via an _blank value for the target attribute of an A element.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Google/Chrome Frame4 versions
    cpe:2.3:a:google:chrome_frame:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:google:chrome_frame:*:*:*:*:*:*:*:*range: <=26.0.1410.27
    • cpe:2.3:a:google:chrome_frame:15.0.874.121:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome_frame:16.0.912.63:*:*:*:*:*:*:*
    • (no CPE)range: <26.0.1410.28

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.