VULNERABILITY INTELLIGENCE
CVE-2009-3934
CVSS score4.3 MEDIUM
EPSS probability1.38%
CISA KEVNot currently listed
Published2009-11-12
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:P
Description
The WebFrameLoaderClient::dispatchDidChangeLocationWithinPage function in src/webkit/glue/webframeloaderclient_impl.cc in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service via a page-local link, related to an "empty redirect chain," as demonstrated by a message in Yahoo! Mail.