CVE-2013-2900

The FilePath::ReferencesParent function in files/file_path.cc in Google Chrome before 29.0.1547.57 on Windows does not properly handle pathname components…

published August 21, 2013

CVSS
—
EPSS
2%
Percentile
77.1
In the wild
Unconfirmed
What it is

The FilePath::ReferencesParent function in files/file_path.cc in Google Chrome before 29.0.1547.57 on Windows does not properly handle pathname components composed entirely of . (dot) and whitespace characters, which allows remote attackers to conduct directory traversal attacks via a crafted directory name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01706 · 77.1th percentile
Published
2013-08-21T10:00Z
EPSS history
Timeline
  • 21 AUG 10:00Z
    The FilePath::ReferencesParent function in files/file_path.cc in Google Chrome before 29.0.1547.57 on Windows does not properly handle pathname components…
    cvelistv5