critical10.0
CVE-2013-0840
Google Chrome before 24.0.1312.56 does not validate URLs during the opening of new windows, which has unspecified impact and remote attack vectors.
Impact
Google Chrome before 24.0.1312.56 does not validate URLs during the opening of new windows, which has unspecified impact and remote attack vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | through 24.0.1312.55 Versions 24.0.1272.0, 24.0.1272.1, 24.0.1273.0, 24.0.1274.0, 24.0.1275.0 |
References
- NVD record
- CVE.org record
- http://googlechromereleases.blogspot.com/2013/01/stable-channel-update_22.html
- https://code.google.com/p/chromium/issues/detail?id=170532
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16335
- http://googlechromereleases.blogspot.com/2013/01/stable-channel-update_22.html
- https://code.google.com/p/chromium/issues/detail?id=170532
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16335