NVD

Id
41563  
Name
CVE-2013-6636  
Description
The FrameLoader::notifyIfInitialDocumentAccessed function in core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 31.0.1650.63, makes an incorrect check for an empty document during presentation of a modal dialog, which allows remote attackers to spoof the address bar via vectors involving the document.write method.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-12-06  
Modified Date
2014-03-05  
Seq
2013-6636  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
210210 41563 CVE-2013-6636 http://googlechromereleases.blogspot.com/2013/12/stable-channel-update.html  View
210211 41563 CVE-2013-6636 openSUSE-SU-2013:1927  View
210212 41563 CVE-2013-6636 openSUSE-SU-2013:1933  View
210213 41563 CVE-2013-6636 openSUSE-SU-2014:0065  View
210214 41563 CVE-2013-6636 DSA-2811  View
210215 41563 CVE-2013-6636 1029442  View
210216 41563 CVE-2013-6636 https://code.google.com/p/chromium/issues/detail?id=322959  View
210217 41563 CVE-2013-6636 https://src.chromium.org/viewvc/blink?revision=162673&view=revision  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23800 JVNDB-2013-005375 Google Chrome で使用される Blink の core/loader/FrameLoader.cpp におけるアドレスバーを偽装される脆弱性 Google Chrome で使用される Blink の core/loader/FrameLoader.cpp の FrameLoader::notifyIfInitialDocumentAccessed 関数は、モーダルダイアログの表示中に空のドキュメントに対して誤ったチェックを行うため、アドレスバーを偽装される脆弱性が存在します。 CVE-2013-6636 66578 CVE-2013-6636 41563 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005375.html 2013-12-04 2014-01-17 View