CVEvulnerability

CVE-2013-2905

5.0 MEDIUM Published 2013-08-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-08-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-264

Description

The SharedMemory::Create function in memory/shared_memory_posix.cc in Google Chrome before 29.0.1547.57 uses weak permissions under /dev/shm/, which allows attackers to obtain sensitive information via direct access to a POSIX shared-memory file.

Affected configurations

• debian debian linux 7.0 • google chrome (<= 29.0.1547.56) • google chrome 29.0.1547.0 • google chrome 29.0.1547.1 • google chrome 29.0.1547.2 • google chrome 29.0.1547.3 • google chrome 29.0.1547.4 • google chrome 29.0.1547.5 • google chrome 29.0.1547.7 • google chrome 29.0.1547.8 • google chrome 29.0.1547.9 • google chrome 29.0.1547.10 • google chrome 29.0.1547.11 • google chrome 29.0.1547.12 • google chrome 29.0.1547.13 • google chrome 29.0.1547.14 • google chrome 29.0.1547.15 • google chrome 29.0.1547.16 • google chrome 29.0.1547.17 • google chrome 29.0.1547.18 • google chrome 29.0.1547.19 • google chrome 29.0.1547.20 • google chrome 29.0.1547.21 • google chrome 29.0.1547.22 • google chrome 29.0.1547.23 • google chrome 29.0.1547.27 • google chrome 29.0.1547.28 • google chrome 29.0.1547.29 • google chrome 29.0.1547.30 • google chrome 29.0.1547.31 • google chrome 29.0.1547.32 • google chrome 29.0.1547.33 • google chrome 29.0.1547.34 • google chrome 29.0.1547.35 • google chrome 29.0.1547.36 • google chrome 29.0.1547.37 • google chrome 29.0.1547.38 • google chrome 29.0.1547.39 • google chrome 29.0.1547.40 • google chrome 29.0.1547.41 • google chrome 29.0.1547.42 • google chrome 29.0.1547.45 • google chrome 29.0.1547.46 • google chrome 29.0.1547.47 • google chrome 29.0.1547.48 • google chrome 29.0.1547.49 • google chrome 29.0.1547.50 • google chrome 29.0.1547.51 • google chrome 29.0.1547.52 • google chrome 29.0.1547.53 • google chrome 29.0.1547.54 • google chrome 29.0.1547.55

Related

Weakness · not in database (1)

References