CVE-2013-6626

Severity Score

4.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The WebContentsImpl::AttachInterstitialPage function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 31.0.1650.48 does not cancel JavaScript dialogs upon generating an interstitial warning, which allows remote attackers to spoof the address bar via a crafted web site.

La función WebContentsImpl::AttachInterstitialPage de content/browser/web_contents/web_contents_impl.cc en Google Chrome anterior a la versión 31.0.1650.48 no cancela diálogos JavaScript en la generación de una advertencia intersticial, lo que permite a atacantes remotos falsificar la barra de direcciones a través de un sitio Web diseñado.

*Credits: N/A

CVSS Scores

NISTv2 4.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-11-05 CVE Reserved
2013-11-13 CVE Published
2023-06-26 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (9)

URL	Tag	Source
https://code.google.com/p/chromium/issues/detail?id=295695	X_refsource_confirm
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18401	Signature
https://src.chromium.org/viewvc/chrome?revision=225026&view=revision	X_refsource_confirm

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html	2017-09-19
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html	2017-09-19
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html	2017-09-19
http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html	2017-09-19
http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html	2017-09-19
http://www.debian.org/security/2013/dsa-2799	2017-09-19

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				<= 31.0.1650.47 Search vendor "Google" for product "Chrome" and version " <= 31.0.1650.47"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.0 Search vendor "Google" for product "Chrome" and version "31.0.1650.0"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.2 Search vendor "Google" for product "Chrome" and version "31.0.1650.2"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.3 Search vendor "Google" for product "Chrome" and version "31.0.1650.3"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.4 Search vendor "Google" for product "Chrome" and version "31.0.1650.4"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.5 Search vendor "Google" for product "Chrome" and version "31.0.1650.5"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.6 Search vendor "Google" for product "Chrome" and version "31.0.1650.6"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.7 Search vendor "Google" for product "Chrome" and version "31.0.1650.7"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.8 Search vendor "Google" for product "Chrome" and version "31.0.1650.8"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.9 Search vendor "Google" for product "Chrome" and version "31.0.1650.9"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.10 Search vendor "Google" for product "Chrome" and version "31.0.1650.10"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.11 Search vendor "Google" for product "Chrome" and version "31.0.1650.11"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.12 Search vendor "Google" for product "Chrome" and version "31.0.1650.12"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.13 Search vendor "Google" for product "Chrome" and version "31.0.1650.13"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.14 Search vendor "Google" for product "Chrome" and version "31.0.1650.14"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.15 Search vendor "Google" for product "Chrome" and version "31.0.1650.15"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.16 Search vendor "Google" for product "Chrome" and version "31.0.1650.16"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.17 Search vendor "Google" for product "Chrome" and version "31.0.1650.17"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.18 Search vendor "Google" for product "Chrome" and version "31.0.1650.18"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.19 Search vendor "Google" for product "Chrome" and version "31.0.1650.19"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.20 Search vendor "Google" for product "Chrome" and version "31.0.1650.20"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.22 Search vendor "Google" for product "Chrome" and version "31.0.1650.22"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.23 Search vendor "Google" for product "Chrome" and version "31.0.1650.23"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.25 Search vendor "Google" for product "Chrome" and version "31.0.1650.25"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.26 Search vendor "Google" for product "Chrome" and version "31.0.1650.26"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.27 Search vendor "Google" for product "Chrome" and version "31.0.1650.27"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.28 Search vendor "Google" for product "Chrome" and version "31.0.1650.28"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.29 Search vendor "Google" for product "Chrome" and version "31.0.1650.29"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.30 Search vendor "Google" for product "Chrome" and version "31.0.1650.30"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.31 Search vendor "Google" for product "Chrome" and version "31.0.1650.31"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.32 Search vendor "Google" for product "Chrome" and version "31.0.1650.32"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.33 Search vendor "Google" for product "Chrome" and version "31.0.1650.33"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.34 Search vendor "Google" for product "Chrome" and version "31.0.1650.34"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.35 Search vendor "Google" for product "Chrome" and version "31.0.1650.35"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.36 Search vendor "Google" for product "Chrome" and version "31.0.1650.36"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.37 Search vendor "Google" for product "Chrome" and version "31.0.1650.37"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.38 Search vendor "Google" for product "Chrome" and version "31.0.1650.38"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.39 Search vendor "Google" for product "Chrome" and version "31.0.1650.39"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.41 Search vendor "Google" for product "Chrome" and version "31.0.1650.41"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.42 Search vendor "Google" for product "Chrome" and version "31.0.1650.42"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.43 Search vendor "Google" for product "Chrome" and version "31.0.1650.43"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.44 Search vendor "Google" for product "Chrome" and version "31.0.1650.44"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.45 Search vendor "Google" for product "Chrome" and version "31.0.1650.45"		-		Affected
Google Search vendor "Google"		Chrome Search vendor "Google" for product "Chrome"				31.0.1650.46 Search vendor "Google" for product "Chrome" and version "31.0.1650.46"		-		Affected