CVEvulnerability
CVE-2013-2900
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-08-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-22
Description
The FilePath::ReferencesParent function in files/file_path.cc in Google Chrome before 29.0.1547.57 on Windows does not properly handle pathname components composed entirely of . (dot) and whitespace characters, which allows remote attackers to conduct directory traversal attacks via a crafted directory name.
Affected configurations
• debian debian linux 7.0
• google chrome (<= 29.0.1547.56)
• google chrome 29.0.1547.0
• google chrome 29.0.1547.1
• google chrome 29.0.1547.2
• google chrome 29.0.1547.3
• google chrome 29.0.1547.4
• google chrome 29.0.1547.5
• google chrome 29.0.1547.7
• google chrome 29.0.1547.8
• google chrome 29.0.1547.9
• google chrome 29.0.1547.10
• google chrome 29.0.1547.11
• google chrome 29.0.1547.12
• google chrome 29.0.1547.13
• google chrome 29.0.1547.14
• google chrome 29.0.1547.15
• google chrome 29.0.1547.16
• google chrome 29.0.1547.17
• google chrome 29.0.1547.18
• google chrome 29.0.1547.19
• google chrome 29.0.1547.20
• google chrome 29.0.1547.21
• google chrome 29.0.1547.22
• google chrome 29.0.1547.23
• google chrome 29.0.1547.27
• google chrome 29.0.1547.28
• google chrome 29.0.1547.29
• google chrome 29.0.1547.30
• google chrome 29.0.1547.31
• google chrome 29.0.1547.32
• google chrome 29.0.1547.33
• google chrome 29.0.1547.34
• google chrome 29.0.1547.35
• google chrome 29.0.1547.36
• google chrome 29.0.1547.37
• google chrome 29.0.1547.38
• google chrome 29.0.1547.39
• google chrome 29.0.1547.40
• google chrome 29.0.1547.41
• google chrome 29.0.1547.42
• google chrome 29.0.1547.45
• google chrome 29.0.1547.46
• google chrome 29.0.1547.47
• google chrome 29.0.1547.48
• google chrome 29.0.1547.49
• google chrome 29.0.1547.50
• google chrome 29.0.1547.51
• google chrome 29.0.1547.52
• google chrome 29.0.1547.53
• google chrome 29.0.1547.54
• google chrome 29.0.1547.55
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://crbug.com/181617 crbug.com
- http://googlechromereleases.blogspot.com/2013/08/stable-channel-update.html googlechromereleases.blogspot.com
- http://www.debian.org/security/2013/dsa-2741 www.debian.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18381 oval.cisecurity.org
- https://src.chromium.org/viewvc/chrome?revision=200603&view=revision src.chromium.org
- http://crbug.com/181617 crbug.com
- http://googlechromereleases.blogspot.com/2013/08/stable-channel-update.html googlechromereleases.blogspot.com
- http://www.debian.org/security/2013/dsa-2741 www.debian.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18381 oval.cisecurity.org
- https://src.chromium.org/viewvc/chrome?revision=200603&view=revision src.chromium.org