CVE

Id
66573  
CVE No.
CVE-2013-6626  
Status
Candidate  
Description
The WebContentsImpl::AttachInterstitialPage function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 31.0.1650.48 does not cancel JavaScript dialogs upon generating an interstitial warning, which allows remote attackers to spoof the address bar via a crafted web site.  
Phase
Assigned (20131105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
645745 66573 CVE-2013-6626 CONFIRM:http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html  View
645746 66573 CVE-2013-6626 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=295695  View
645747 66573 CVE-2013-6626 CONFIRM:https://src.chromium.org/viewvc/chrome?revision=225026&view=revision  View
645748 66573 CVE-2013-6626 DEBIAN:DSA-2799  View
645749 66573 CVE-2013-6626 URL:http://www.debian.org/security/2013/dsa-2799  View
645750 66573 CVE-2013-6626 SUSE:openSUSE-SU-2013:1776  View
645751 66573 CVE-2013-6626 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html  View
645752 66573 CVE-2013-6626 SUSE:openSUSE-SU-2013:1777  View
645753 66573 CVE-2013-6626 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html  View
645754 66573 CVE-2013-6626 SUSE:openSUSE-SU-2013:1861  View
645755 66573 CVE-2013-6626 URL:http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html  View
645756 66573 CVE-2013-6626 SUSE:openSUSE-SU-2014:0065  View
645757 66573 CVE-2013-6626 URL:http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html  View
645758 66573 CVE-2013-6626 OVAL:oval:org.mitre.oval:def:18401  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23602 JVNDB-2013-005177 Google Chrome などで使用される WebRTC の libjingle の voice_engine/channel.cc におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome およびその他の製品で使用される WebRTC の libjingle の voice_engine/channel.cc 内の Channel::SendRTCPPacket 関数には、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (ヒープメモリ破損) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2013-6631 66573 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005177.html  View