Oval Definition:oval:org.mitre.oval:def:22272
Revision Date:2014-03-17Version:28
Title:Vulnerability in Google Chrome before 32.0.1700.76 on Windows allows attackers to trigger a sync with an arbitrary Google account by leveraging improper handling of the closing of an untrusted signin confirm dialog
Description:The OneClickSigninBubbleView::WindowClosing function in browser/ui/views/sync/one_click_signin_bubble_view.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows attackers to trigger a sync with an arbitrary Google account by leveraging improper handling of the closing of an untrusted signin confirm dialog.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2013-6643
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Google Chrome
Definition Synopsis
  • Google Chrome is installed
  • AND Affected versions of Google Chrome
  • Check if the version of Google Chrome is greater than or equals to 32.0.1651.2
  • AND Check if the version of Google Chrome is less than or equals to 32.0.1700.75
  • BACK