CVE-2013-2900

Publication date 21 August 2013

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The FilePath::ReferencesParent function in files/file_path.cc in Google Chrome before 29.0.1547.57 on Windows does not properly handle pathname components composed entirely of . (dot) and whitespace characters, which allows remote attackers to conduct directory traversal attacks via a crafted directory name.

Status

Package Ubuntu Release Status
chromium-browser 13.04 raring
Not affected
12.10 quantal
Not affected
12.04 LTS precise
Not affected
10.04 LTS lucid Ignored end of life