Security Advisory

CVE-2013-0927

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2013-04-10 16:00:00

Last updated 2024-09-17 03:23:19

Assigner Chrome

State PUBLISHED

Description

Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation that loads the contents of the .pangorc file in the users home directory, and the file referenced by the PANGO_RC_FILE environment variable, which allows attackers to bypass intended access restrictions via crafted configuration data.

← Browse all CVEs View on cve.org ↗