This host is installed with google chrome frame plugin for microsoft ie and is prone to denial of service vulnerability.

Successful exploitation will allow remote attacker to crash the program via a specially crafted _blank value for the target attribute of an A element. Impact Level: Application

Upgrade to Google Chrome Frame plugin 26.0.1410.28 or later, For updates refer to http://www.google.com/chromeframe

Flaw due to an improper handling of an attach tab request in the Hook_Terminate function in chrome_frame/protocol_sink_wrap.cc.

Google Chrome Frame plugin version before 26.0.1410.28

• http://googlechromereleases.blogspot.in/2013/03/beta-channel-update.html
• http://www.osvdb.com/91114
• https://chromiumcodereview.appspot.com/12395021
• https://code.google.com/p/chromium/issues/detail?id=178415

---

Updated on 2015-03-25