CVE-2013-0927

2013-04-10T16:55:00
ID CVE-2013-0927
Type cve
Reporter cve@mitre.org
Modified 2013-04-11T04:00:00

Description

Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGO_RC_FILE environment variable, which allows attackers to bypass intended access restrictions via crafted configuration data.