CVE-2013-6634
EUVD-2013-643607.12.2013, 00:55
The OneClickSigninHelper::ShowInfoBarIfPossible function in browser/ui/sync/one_click_signin_helper.cc in Google Chrome before 31.0.1650.63 uses an incorrect URL during realm validation, which allows remote attackers to conduct session fixation attacks and hijack web sessions by triggering improper sync after a 302 (aka Found) HTTP status code.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| chrome | 𝑥 ≤ 31.0.1650.62 | |
| chrome | 31.0.1650.0 | |
| chrome | 31.0.1650.2 | |
| chrome | 31.0.1650.3 | |
| chrome | 31.0.1650.4 | |
| chrome | 31.0.1650.5 | |
| chrome | 31.0.1650.6 | |
| chrome | 31.0.1650.7 | |
| chrome | 31.0.1650.8 | |
| chrome | 31.0.1650.9 | |
| chrome | 31.0.1650.10 | |
| chrome | 31.0.1650.11 | |
| chrome | 31.0.1650.12 | |
| chrome | 31.0.1650.13 | |
| chrome | 31.0.1650.14 | |
| chrome | 31.0.1650.15 | |
| chrome | 31.0.1650.16 | |
| chrome | 31.0.1650.17 | |
| chrome | 31.0.1650.18 | |
| chrome | 31.0.1650.19 | |
| chrome | 31.0.1650.20 | |
| chrome | 31.0.1650.22 | |
| chrome | 31.0.1650.23 | |
| chrome | 31.0.1650.25 | |
| chrome | 31.0.1650.26 | |
| chrome | 31.0.1650.27 | |
| chrome | 31.0.1650.28 | |
| chrome | 31.0.1650.29 | |
| chrome | 31.0.1650.30 | |
| chrome | 31.0.1650.31 | |
| chrome | 31.0.1650.32 | |
| chrome | 31.0.1650.33 | |
| chrome | 31.0.1650.34 | |
| chrome | 31.0.1650.35 | |
| chrome | 31.0.1650.36 | |
| chrome | 31.0.1650.37 | |
| chrome | 31.0.1650.38 | |
| chrome | 31.0.1650.39 | |
| chrome | 31.0.1650.41 | |
| chrome | 31.0.1650.42 | |
| chrome | 31.0.1650.43 | |
| chrome | 31.0.1650.44 | |
| chrome | 31.0.1650.45 | |
| chrome | 31.0.1650.46 | |
| chrome | 31.0.1650.47 | |
| chrome | 31.0.1650.48 | |
| chrome | 31.0.1650.49 | |
| chrome | 31.0.1650.50 | |
| chrome | 31.0.1650.51 | |
| chrome | 31.0.1650.52 | |
| chrome | 31.0.1650.53 | |
| chrome | 31.0.1650.54 | |
| chrome | 31.0.1650.55 | |
| chrome | 31.0.1650.57 | |
| chrome | 31.0.1650.58 | |
| chrome | 31.0.1650.59 | |
| chrome | 31.0.1650.60 | |
| chrome | 31.0.1650.61 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References