{"cve":"CVE-2013-2493","nvd":{"published":"2013-03-07T16:55:01.557","modified":"2026-06-16T23:53:34.640","status":"Modified","description":"The Hook_Terminate function in chrome_frame/protocol_sink_wrap.cc in the Google Chrome Frame plugin before 26.0.1410.28 for Internet Explorer does not properly handle attach tab requests, which allows user-assisted remote attackers to cause a denial of service (application crash) via an _blank value for the target attribute of an A element.","cvss_v4":null,"cvss_v3":null,"cwes":["CWE-119"],"references":["http://googlechromereleases.blogspot.com/2013/03/beta-channel-update.html","http://src.chromium.org/viewvc/chrome/trunk/src/chrome_frame/protocol_sink_wrap.cc?r1=185956&r2=185955&pathrev=185956","http://src.chromium.org/viewvc/chrome?view=rev&revision=185956","https://chromiumcodereview.appspot.com/12395021","https://code.google.com/p/chromium/issues/detail?id=178415"],"products":["google:chrome_frame"],"source":"nvd","synced_at":"2026-10-19T20:27:27.940201468+00:00"},"epss":{"cve":"CVE-2013-2493","score":0.01123,"percentile":0.66236,"date":"2026-11-01"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}