Lucene search
HistoryAug 21, 2013 - 12:17 p.m.
CVE-2013-2900
cve-2013-2900
google chrome
directory traversal
vulnerability
file_path.cc
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.5%
The FilePath::ReferencesParent function in files/file_path.cc in Google Chrome before 29.0.1547.57 on Windows does not properly handle pathname components composed entirely of . (dot) and whitespace characters, which allows remote attackers to conduct directory traversal attacks via a crafted directory name.
Affected configurations
Node
debiandebian_linuxMatch7.0
Node
googlechromeRange≤29.0.1547.56
ORgooglechromeMatch29.0.1547.0
ORgooglechromeMatch29.0.1547.1
ORgooglechromeMatch29.0.1547.2
ORgooglechromeMatch29.0.1547.3
ORgooglechromeMatch29.0.1547.4
ORgooglechromeMatch29.0.1547.5
ORgooglechromeMatch29.0.1547.7
ORgooglechromeMatch29.0.1547.8
ORgooglechromeMatch29.0.1547.9
ORgooglechromeMatch29.0.1547.10
ORgooglechromeMatch29.0.1547.11
ORgooglechromeMatch29.0.1547.12
ORgooglechromeMatch29.0.1547.13
ORgooglechromeMatch29.0.1547.14
ORgooglechromeMatch29.0.1547.15
ORgooglechromeMatch29.0.1547.16
ORgooglechromeMatch29.0.1547.17
ORgooglechromeMatch29.0.1547.18
ORgooglechromeMatch29.0.1547.19
ORgooglechromeMatch29.0.1547.20
ORgooglechromeMatch29.0.1547.21
ORgooglechromeMatch29.0.1547.22
ORgooglechromeMatch29.0.1547.23
ORgooglechromeMatch29.0.1547.27
ORgooglechromeMatch29.0.1547.28
ORgooglechromeMatch29.0.1547.29
ORgooglechromeMatch29.0.1547.30
ORgooglechromeMatch29.0.1547.31
ORgooglechromeMatch29.0.1547.32
ORgooglechromeMatch29.0.1547.33
ORgooglechromeMatch29.0.1547.34
ORgooglechromeMatch29.0.1547.35
ORgooglechromeMatch29.0.1547.36
ORgooglechromeMatch29.0.1547.37
ORgooglechromeMatch29.0.1547.38
ORgooglechromeMatch29.0.1547.39
ORgooglechromeMatch29.0.1547.40
ORgooglechromeMatch29.0.1547.41
ORgooglechromeMatch29.0.1547.42
ORgooglechromeMatch29.0.1547.45
ORgooglechromeMatch29.0.1547.46
ORgooglechromeMatch29.0.1547.47
ORgooglechromeMatch29.0.1547.48
ORgooglechromeMatch29.0.1547.49
ORgooglechromeMatch29.0.1547.50
ORgooglechromeMatch29.0.1547.51
ORgooglechromeMatch29.0.1547.52
ORgooglechromeMatch29.0.1547.53
ORgooglechromeMatch29.0.1547.54
ORgooglechromeMatch29.0.1547.55
microsoftwindows
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian:debian_linux | debian debian linux | eq | 7.0 |
Related
cvelist
cvelist
CVE-2013-2900
2013-08-21 10:00:00
ubuntucve
ubuntucve
CVE-2013-2900
2013-08-21 00:00:00
debiancve
debiancve
CVE-2013-2900
2013-08-21 12:17:00
prion
prion
Directory traversal
2013-08-21 12:17:00
nvd
nvd
CVE-2013-2900
2013-08-21 12:17:56
threatpost
threatpost
Google Chrome 29 Fixes 25 Vulnerabilities
2013-08-20 13:45:24
nessus
nessus
FreeBSD : chromium -- multiple vulnerabilities (ae651a4b-0a42-11e3-ba52-00262d5ed8ee)
2013-08-22 00:00:00
Debian DSA-2741-1 : chromium-browser - several vulnerabilities
2013-08-26 00:00:00
Google Chrome < 29.0.1547.57 Multiple Vulnerabilities
2013-08-22 00:00:00
openvas
openvas
Google Chrome Multiple Vulnerabilities-01 (Aug 2013) - Windows
2013-08-26 00:00:00
Google Chrome Multiple Vulnerabilities-01 (Aug 2013) - Linux
2013-08-26 00:00:00
Google Chrome Multiple Vulnerabilities-01 August13 (Mac OS X)
2013-08-26 00:00:00
debian
debian
[SECURITY] [DSA 2741-1] chromium-browser security update
2013-08-25 20:47:19
[SECURITY] [DSA 2741-1] chromium-browser security update
2013-08-25 20:47:19
chrome
chrome
Stable Channel Update
2013-08-20 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2741-1] chromium-browser security update
2013-08-28 00:00:00
Chromium / Google Chrome multiple security vulnerabilities
2013-08-28 00:00:00
osv
osv
chromium-browser - several
2013-08-25 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2013-08-20 00:00:00
mageia
mageia
Updated chromium-browser-stable package fix security vulnerabilities
2013-09-14 00:29:51
gentoo
gentoo
Chromium, V8: Multiple vulnerabilities
2013-09-24 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.5%
Related for CVE-2013-2900