CVEvulnerability
CVE-2013-0895
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-02-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-22
Description
Google Chrome before 25.0.1364.97 on Linux, and before 25.0.1364.99 on Mac OS X, does not properly handle pathnames during copy operations, which might make it easier for remote attackers to execute arbitrary programs via unspecified vectors.
Affected configurations
• google chrome (< 25.0.1364.97)
• google chrome (< 25.0.1364.99)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html googlechromereleases.blogspot.com
- http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html lists.opensuse.org
- https://code.google.com/p/chromium/issues/detail?id=167840 code.google.com
- http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html googlechromereleases.blogspot.com
- http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html lists.opensuse.org
- https://code.google.com/p/chromium/issues/detail?id=167840 code.google.com