CVE-2009-3934

The WebFrameLoaderClient::dispatchDidChangeLocationWithinPage function in src/webkit/glue/webframeloaderclient_impl.cc in Google Chrome before 3.0.195.32…

published November 12, 2009

CVSS
—
EPSS
1%
Percentile
71.8
In the wild
Unconfirmed
What it is

The WebFrameLoaderClient::dispatchDidChangeLocationWithinPage function in src/webkit/glue/webframeloaderclient_impl.cc in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service via a page-local link, related to an "empty redirect chain," as demonstrated by a message in Yahoo! Mail.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01375 · 71.8th percentile
Published
2009-11-12T16:00Z
EPSS history
Timeline
  • 12 NOV 16:00Z
    The WebFrameLoaderClient::dispatchDidChangeLocationWithinPage function in src/webkit/glue/webframeloaderclient_impl.cc in Google Chrome before 3.0.195.32…
    cvelistv5