Unrated severityNVD Advisory· Published Jan 16, 2014· Updated Apr 29, 2026
CVE-2013-6643
CVE-2013-6643
Description
The OneClickSigninBubbleView::WindowClosing function in browser/ui/views/sync/one_click_signin_bubble_view.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows attackers to trigger a sync with an arbitrary Google account by leveraging improper handling of the closing of an untrusted signin confirm dialog.
Affected products
5cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- src.chromium.org/viewvc/chromenvdPatchVendor Advisory
- code.google.com/p/chromium/issues/detailnvdExploitPatchVendor Advisory
- googlechromereleases.blogspot.com/2014/01/stable-channel-update.htmlnvdRelease NotesVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.htmlnvdMailing ListThird Party Advisory
- www.debian.org/security/2014/dsa-2862nvdThird Party Advisory
News mentions
0No linked articles in our index yet.