Google Chrome OnbeforeUload and OnUnload Null Check Vulnerability

Proof of Concept

Note: Design Flaw.No Check on “OnbeforeUnload” and “OnUnload” Closing Events.

This POC has been designed with minimum object usage. This can be made more critical dependent on the object usage.

Google Chrome OnbeforeUload and OnUnload Null Check Vulnerability POC. Open it with New Window to trigger the POC.

Version Tested:

Official Build 1798

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US)

AppleWebKit/525.13 (KHTML, like Gecko)

Chrome/0.2.149.29 Safari/525.13

Official Build 2200

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US)

AppleWebKit/525.13 (KHTML, like Gecko)

Chrome/0.2.149.30 Safari/525.13