CVE-2013-6643: High severity Google Chrome vulnerability
The OneClickSigninBubbleView::WindowClosing function in browser/ui/views/sync/oneclicksigninbubbleview.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows attackers to trigger a sync with an arbitrary Google account by leveraging improper handling of the closing of an untrusted signin confirm dialog.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6643?
CVE-2013-6643 has a moderate severity level as it can allow attackers to compromise user data through arbitrary account syncs.
How do I fix CVE-2013-6643?
To fix CVE-2013-6643, update Google Chrome to version 32.0.1700.76 or later.
Which versions of Google Chrome are affected by CVE-2013-6643?
CVE-2013-6643 affects Google Chrome versions prior to 32.0.1700.76 on Windows and prior to 32.0.1700.77 on Mac OS X and Linux.
What platforms are vulnerable to CVE-2013-6643?
CVE-2013-6643 is specifically vulnerable on Windows, Mac OS X, and Linux platforms running affected versions of Google Chrome.
What impact does CVE-2013-6643 have on users?
CVE-2013-6643 could lead to unauthorized access and synchronization of data with an attacker-controlled Google account.