Vulnerability in Google Chrome

CVE-2010-3246

Google Chrome before 6.0.472.53 does not properly handle the _blank value for the target attribute of unspecified elements, which allows remote attackers to bypass the pop-up blocker via unknown vectors.

EPSS: 0.009 (54.9th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (x_refsource_CONFIRM, Patch, Issue Tracking, Vendor Advisory)
  • cve@mitre.org (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
  • cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)