CVE-2013-6652 | BDVDB-2026-60029 Detail

Description#

Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome before 33.0.1750.117 on Windows allows attackers to bypass intended named-pipe policy restrictions in the sandbox via vectors related to (1) lack of checks for .. (dot dot) sequences or (2) lack of use of the \\?\ protection mechanism.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://code.google.com/p/chromium/issues/detail?id=334897
https://src.chromium.org/viewvc/chrome?revision=247511&view=revision
http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html

Exploit#

No public exploit known

History#

Version 12014-02-24Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.