CVE

Id
66581  
CVE No.
CVE-2013-6634  
Status
Candidate  
Description
The OneClickSigninHelper::ShowInfoBarIfPossible function in browser/ui/sync/one_click_signin_helper.cc in Google Chrome before 31.0.1650.63 uses an incorrect URL during realm validation, which allows remote attackers to conduct session fixation attacks and hijack web sessions by triggering improper sync after a 302 (aka Found) HTTP status code.  
Phase
Assigned (20131105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
645965 66581 CVE-2013-6634 CONFIRM:http://googlechromereleases.blogspot.com/2013/12/stable-channel-update.html  View
645966 66581 CVE-2013-6634 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=307159  View
645967 66581 CVE-2013-6634 CONFIRM:https://src.chromium.org/viewvc/chrome?revision=236563&view=revision  View
645968 66581 CVE-2013-6634 DEBIAN:DSA-2811  View
645969 66581 CVE-2013-6634 URL:http://www.debian.org/security/2013/dsa-2811  View
645970 66581 CVE-2013-6634 SUSE:openSUSE-SU-2013:1927  View
645971 66581 CVE-2013-6634 URL:http://lists.opensuse.org/opensuse-updates/2013-12/msg00090.html  View
645972 66581 CVE-2013-6634 SUSE:openSUSE-SU-2013:1933  View
645973 66581 CVE-2013-6634 URL:http://lists.opensuse.org/opensuse-updates/2013-12/msg00096.html  View
645974 66581 CVE-2013-6634 SUSE:openSUSE-SU-2014:0065  View
645975 66581 CVE-2013-6634 URL:http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html  View
645976 66581 CVE-2013-6634 SECTRACK:1029442  View
645977 66581 CVE-2013-6634 URL:http://www.securitytracker.com/id/1029442  View
645978 66581 CVE-2013-6634 SECUNIA:56217  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23803 JVNDB-2013-005378 Google Chrome で使用される Google V8 の hydrogen-dehoist.cc におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome で使用される Google V8 の hydrogen-dehoist.cc の DehoistArrayIndex 関数には、サービス運用妨害 (out-of-bounds write) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2013-6639 66581 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005378.html  View