Oval Definition:oval:org.mitre.oval:def:18381
Revision Date:2013-09-30Version:27
Title:The FilePath::ReferencesParent function in files/file_path.cc in Google Chrome before 29.0.1547.57 on Windows does not properly handle pathname components composed entirely of . (dot) and whitespace characters, which allows remote attackers to conduct directory traversal attacks via a crafted directory name.
Description:The FilePath::ReferencesParent function in files/file_path.cc in Google Chrome before 29.0.1547.57 on Windows does not properly handle pathname components composed entirely of . (dot) and whitespace characters, which allows remote attackers to conduct directory traversal attacks via a crafted directory name.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2013-2900
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Google Chrome
Definition Synopsis
  • Google Chrome is installed
  • AND Check if the version of Google Chrome is less than 29.0.1547.57
  • BACK