CVE-2013-6643 in Chrome
Summary
The OneClickSigninBubbleView::WindowClosing function in browser/ui/views/sync/one_click_signin_bubble_view.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows attackers to trigger a sync with an arbitrary Google account by leveraging improper handling of the closing of an untrusted signin confirm dialog.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
11/05/2013
Disclosure
01/16/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 11959 | Google Chrome Sync improper authentication | 287 | Unproven | Official fix | CVE-2013-6643 |