CVE-2013-6634

The OneClickSigninHelper::ShowInfoBarIfPossible function in browser/ui/sync...

6.8 MediumFix available

CVE-2013-6634 is a medium vulnerability (CVSS 6.8) in Google Chrome, published December 7, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.44%, the 73rd percentile. Fixed in chromium-browser 31.0.1650.63-1~deb7u1.

The OneClickSigninHelper::ShowInfoBarIfPossible function in browser/ui/sync/one_click_signin_helper.cc in Google Chrome before 31.0.1650.63 uses an incorrect URL during realm validation, which allows remote attackers to conduct session fixation attacks and hijack web sessions by triggering improper sync after a 302 (aka Found) HTTP status code.

Exploit likelihood

1.44%Down 0.3 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Record: CVE-2013-6634
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-287
Updated: 2026-11-02

CVE List No score

Record: CVE-2013-6634
Updated: 2026-11-02

EUVDEUVD-2013-6436 No score

Record: EUVD-2013-6436
Updated: 2026-11-03

GitHub AdvisoriesGHSA-74gf-43jg-q6vr No score

The OneClickSigninHelper::ShowInfoBarIfPossible function in browser/ui/sync...

Record: GHSA-74gf-43jg-q6vr
Weakness: CWE-287
Updated: 2026-11-02

OSVMGASA-2013-0383 No score

Updated chromium-browser-stable fixes multiple vulnerabilities

Updated chromium-browser-stable packages fix security vulnerabilities:

Pinkie Pie discovered multiple memory corruption issues (CVE-2013-6632).

Andrey Labunets discovered that the wrong URL was used during validation in the one-click sign on helper (CVE-2013-6634).

cloudfuzzer discovered use-after-free issues in the InsertHTML and Indent DOM editing commands (CVE-2013-6635).

Bas Venis discovered an address bar spoofing issue (CVE-2013-6636).

The chrome 31 development team discovered and fixed multiple issues with potential security impact (CVE-2013-6637).

Jakob Kummerow of the Chromium project discovered a buffer overflow in the v8 javascript library (CVE-2013-6638).

Jakob Kummerow of the Chromium project discovered an out-of-bounds write in the v8 javascript library (CVE-2013-6639).

Jakob Kummerow of the Chromium project discovered an out-of-bounds read in the v8 javascript library (CVE-2013-6640).

Record: MGASA-2013-0383
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10171-1 No score

chromedriver-55.0.2883.75-3.1 on GA media

These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10171-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:12948-1 No score

ungoogled-chromium-113.0.5672.92-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:12948-1
Updated: 2026-11-02

Affected products

google chrome

Affected packages

Affected packages
Package	Affected	Fixed
`chromium-browser` Debian:7	before 31.0.1650.63-1~deb7u1, plus listed versions 26.0.1410.43-127.0.1453.110-127.0.1453.110-1~deb7u127.0.1453.110-227.0.1453.93-1 Show 19 moreShow less 27.0.1453.93-1~deb7u128.0.1500.71-128.0.1500.71-1~deb7u128.0.1500.71-228.0.1500.95-128.0.1500.95-1~deb7u128.0.1500.95-228.0.1500.95-329.0.1547.57-129.0.1547.57-1~deb7u129.0.1547.57-229.0.1547.57-329.0.1547.57-3+exp130.0.1599.101-130.0.1599.101-1~deb7u130.0.1599.101-230.0.1599.101-331.0.1650.57-131.0.1650.57-1~deb7u1	31.0.1650.63-1~deb7u1
`chromium-browser-stable` Mageia:3	before 31.0.1650.63-1.mga3	31.0.1650.63-1.mga3
`chromium-browser-stable` Mageia:3	before 31.0.1650.63-1.mga3.tainted	31.0.1650.63-1.mga3.tainted
`chromium` openSUSE:Tumbleweed	before 55.0.2883.75-3.1	55.0.2883.75-3.1
`chromium` openSUSE:Tumbleweed	before 113.0.5672.92-1.1	113.0.5672.92-1.1