Description
The FrameLoader::notifyIfInitialDocumentAccessed function in core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 31.0.1650.63, makes an incorrect check for an empty document during presentation of a modal dialog, which allows remote attackers to spoof the address bar via vectors involving the document.write method.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2811-1 | chromium-browser security update |
EUVD |
EUVD-2013-6438 | The FrameLoader::notifyIfInitialDocumentAccessed function in core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 31.0.1650.63, makes an incorrect check for an empty document during presentation of a modal dialog, which allows remote attackers to spoof the address bar via vectors involving the document.write method. |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T17:46:22.396Z
Reserved: 2013-11-05T00:00:00.000Z
Link: CVE-2013-6636
No data.
Status : Modified
Published: 2013-12-07T00:55:03.880
Modified: 2026-04-29T01:13:23.040
Link: CVE-2013-6636
No data.
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD