Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-2298
HistoryJun 15, 2010 - 12:00 a.m.

CVE-2010-2298

2010-06-1500:00:00
ubuntu.com
ubuntu.com
11

0.004 Low

EPSS

Percentile

73.2%

browser/renderer_host/database_dispatcher_host.cc in Google Chrome before
5.0.375.70 on Linux does not properly handle ViewHostMsg_DatabaseOpenFile
messages in chroot-based sandboxing, which allows remote attackers to
bypass intended sandbox restrictions via vectors involving fchdir and chdir
calls.

Notes

Author Note
mdeslaur chromium-specific

0.004 Low

EPSS

Percentile

73.2%