CVE

Id
66583  
CVE No.
CVE-2013-6636  
Status
Candidate  
Description
The FrameLoader::notifyIfInitialDocumentAccessed function in core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 31.0.1650.63, makes an incorrect check for an empty document during presentation of a modal dialog, which allows remote attackers to spoof the address bar via vectors involving the document.write method.  
Phase
Assigned (20131105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
645997 66583 CVE-2013-6636 CONFIRM:http://googlechromereleases.blogspot.com/2013/12/stable-channel-update.html  View
645998 66583 CVE-2013-6636 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=322959  View
645999 66583 CVE-2013-6636 CONFIRM:https://src.chromium.org/viewvc/blink?revision=162673&view=revision  View
646000 66583 CVE-2013-6636 DEBIAN:DSA-2811  View
646001 66583 CVE-2013-6636 URL:http://www.debian.org/security/2013/dsa-2811  View
646002 66583 CVE-2013-6636 SUSE:openSUSE-SU-2013:1927  View
646003 66583 CVE-2013-6636 URL:http://lists.opensuse.org/opensuse-updates/2013-12/msg00090.html  View
646004 66583 CVE-2013-6636 SUSE:openSUSE-SU-2013:1933  View
646005 66583 CVE-2013-6636 URL:http://lists.opensuse.org/opensuse-updates/2013-12/msg00096.html  View
646006 66583 CVE-2013-6636 SUSE:openSUSE-SU-2014:0065  View
646007 66583 CVE-2013-6636 URL:http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html  View
646008 66583 CVE-2013-6636 SECTRACK:1029442  View
646009 66583 CVE-2013-6636 URL:http://www.securitytracker.com/id/1029442  View
646010 66583 CVE-2013-6636 SECUNIA:56217  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
12322 JVNDB-2014-001197 Google Chrome で使用される Blink の core/html/FormAssociatedElement.cpp におけるサービス運用妨害 (DoS) の脆弱性 Windows、Mac OS X および Linux 上で稼働する Google Chrome で使用される Blink の core/html/FormAssociatedElement.cpp の FormAssociatedElement::formRemovedFromTree 関数には、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (DoS) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2013-6641 66583 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001197.html  View