Directory traversal

The FilePath::ReferencesParent function in files/filepath.cc in Google Chrome before 29.0.1547.57 on Windows does not properly handle pathname components composed entirely of . dot and whitespace characters, which allows remote attackers to conduct directory traversal attacks via a crafted...

CVE-2013-2900

The CVE-2013-2900 vulnerability affects Google Chrome prior to 29.0.1547.57 on Windows, caused by the FilePath::ReferencesParent function in files/file_path.cc misparsing directory components consisting only of dots and whitespace, enabling remote directory-traversal via crafted directory names. ...