CVEvulnerability

CVE-2013-2879

5.8 MEDIUM Published 2013-07-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-07-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Weaknesses
CWE-200

Description

Google Chrome before 28.0.1500.71 does not properly determine the circumstances in which a renderer process can be considered a trusted process for sign-in and subsequent sync operations, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site.

Affected configurations

• google chrome (<= 28.0.1500.70) • google chrome 28.0.1500.0 • google chrome 28.0.1500.2 • google chrome 28.0.1500.3 • google chrome 28.0.1500.4 • google chrome 28.0.1500.5 • google chrome 28.0.1500.6 • google chrome 28.0.1500.8 • google chrome 28.0.1500.9 • google chrome 28.0.1500.10 • google chrome 28.0.1500.11 • google chrome 28.0.1500.12 • google chrome 28.0.1500.13 • google chrome 28.0.1500.14 • google chrome 28.0.1500.15 • google chrome 28.0.1500.16 • google chrome 28.0.1500.17 • google chrome 28.0.1500.18 • google chrome 28.0.1500.19 • google chrome 28.0.1500.20 • google chrome 28.0.1500.21 • google chrome 28.0.1500.22 • google chrome 28.0.1500.23 • google chrome 28.0.1500.24 • google chrome 28.0.1500.25 • google chrome 28.0.1500.26 • google chrome 28.0.1500.27 • google chrome 28.0.1500.28 • google chrome 28.0.1500.29 • google chrome 28.0.1500.31 • google chrome 28.0.1500.32 • google chrome 28.0.1500.33 • google chrome 28.0.1500.34 • google chrome 28.0.1500.35 • google chrome 28.0.1500.36 • google chrome 28.0.1500.37 • google chrome 28.0.1500.38 • google chrome 28.0.1500.39 • google chrome 28.0.1500.40 • google chrome 28.0.1500.41 • google chrome 28.0.1500.42 • google chrome 28.0.1500.43 • google chrome 28.0.1500.44 • google chrome 28.0.1500.45 • google chrome 28.0.1500.46 • google chrome 28.0.1500.47 • google chrome 28.0.1500.48 • google chrome 28.0.1500.49 • google chrome 28.0.1500.50 • google chrome 28.0.1500.51 • google chrome 28.0.1500.52 • google chrome 28.0.1500.53 • google chrome 28.0.1500.54 • google chrome 28.0.1500.56 • google chrome 28.0.1500.58 • google chrome 28.0.1500.59 • google chrome 28.0.1500.60 • google chrome 28.0.1500.61 • google chrome 28.0.1500.62 • google chrome 28.0.1500.63 … and 4 more

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References