Lucene search

[email protected]NVD:CVE-2013-2900

HistoryAug 21, 2013 - 12:17 p.m.

CVE-2013-2900

2013-08-2112:17:56

CWE-22

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

0.011

Percentile

84.5%

JSON

The FilePath::ReferencesParent function in files/file_path.cc in Google Chrome before 29.0.1547.57 on Windows does not properly handle pathname components composed entirely of . (dot) and whitespace characters, which allows remote attackers to conduct directory traversal attacks via a crafted directory name.

Affected configurations

Nvd

Node

debiandebian_linuxMatch7.0

Node

googlechromeRange≤29.0.1547.56

googlechromeMatch29.0.1547.0

googlechromeMatch29.0.1547.1

googlechromeMatch29.0.1547.2

googlechromeMatch29.0.1547.3

googlechromeMatch29.0.1547.4

googlechromeMatch29.0.1547.5

googlechromeMatch29.0.1547.7

googlechromeMatch29.0.1547.8

googlechromeMatch29.0.1547.9

googlechromeMatch29.0.1547.10

googlechromeMatch29.0.1547.11

googlechromeMatch29.0.1547.12

googlechromeMatch29.0.1547.13

googlechromeMatch29.0.1547.14

googlechromeMatch29.0.1547.15

googlechromeMatch29.0.1547.16

googlechromeMatch29.0.1547.17

googlechromeMatch29.0.1547.18

googlechromeMatch29.0.1547.19

googlechromeMatch29.0.1547.20

googlechromeMatch29.0.1547.21

googlechromeMatch29.0.1547.22

googlechromeMatch29.0.1547.23

googlechromeMatch29.0.1547.27

googlechromeMatch29.0.1547.28

googlechromeMatch29.0.1547.29

googlechromeMatch29.0.1547.30

googlechromeMatch29.0.1547.31

googlechromeMatch29.0.1547.32

googlechromeMatch29.0.1547.33

googlechromeMatch29.0.1547.34

googlechromeMatch29.0.1547.35

googlechromeMatch29.0.1547.36

googlechromeMatch29.0.1547.37

googlechromeMatch29.0.1547.38

googlechromeMatch29.0.1547.39

googlechromeMatch29.0.1547.40

googlechromeMatch29.0.1547.41

googlechromeMatch29.0.1547.42

googlechromeMatch29.0.1547.45

googlechromeMatch29.0.1547.46

googlechromeMatch29.0.1547.47

googlechromeMatch29.0.1547.48

googlechromeMatch29.0.1547.49

googlechromeMatch29.0.1547.50

googlechromeMatch29.0.1547.51

googlechromeMatch29.0.1547.52

googlechromeMatch29.0.1547.53

googlechromeMatch29.0.1547.54

googlechromeMatch29.0.1547.55

AND

microsoftwindows

VendorProductVersionCPE
debiandebian_linux7.0cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
googlechrome*cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
googlechrome29.0.1547.0cpe:2.3:a:google:chrome:29.0.1547.0:*:*:*:*:*:*:*
googlechrome29.0.1547.1cpe:2.3:a:google:chrome:29.0.1547.1:*:*:*:*:*:*:*
googlechrome29.0.1547.2cpe:2.3:a:google:chrome:29.0.1547.2:*:*:*:*:*:*:*
googlechrome29.0.1547.3cpe:2.3:a:google:chrome:29.0.1547.3:*:*:*:*:*:*:*
googlechrome29.0.1547.4cpe:2.3:a:google:chrome:29.0.1547.4:*:*:*:*:*:*:*
googlechrome29.0.1547.5cpe:2.3:a:google:chrome:29.0.1547.5:*:*:*:*:*:*:*
googlechrome29.0.1547.7cpe:2.3:a:google:chrome:29.0.1547.7:*:*:*:*:*:*:*
googlechrome29.0.1547.8cpe:2.3:a:google:chrome:29.0.1547.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
debian	debian_linux	7.0	cpe:2.3:o:debian:debian_linux:7.0:::::::*
google	chrome	*	cpe:2.3:a:google:chrome::::::::
google	chrome	29.0.1547.0	cpe:2.3:a:google:chrome:29.0.1547.0:::::::*
google	chrome	29.0.1547.1	cpe:2.3:a:google:chrome:29.0.1547.1:::::::*
google	chrome	29.0.1547.2	cpe:2.3:a:google:chrome:29.0.1547.2:::::::*
google	chrome	29.0.1547.3	cpe:2.3:a:google:chrome:29.0.1547.3:::::::*
google	chrome	29.0.1547.4	cpe:2.3:a:google:chrome:29.0.1547.4:::::::*
google	chrome	29.0.1547.5	cpe:2.3:a:google:chrome:29.0.1547.5:::::::*
google	chrome	29.0.1547.7	cpe:2.3:a:google:chrome:29.0.1547.7:::::::*
google	chrome	29.0.1547.8	cpe:2.3:a:google:chrome:29.0.1547.8:::::::*