Path Traversal in Apple Mac Os X
CVE-2013-0895
Google Chrome before 25.0.1364.97 on Linux, and before 25.0.1364.99 on Mac OS X, does not properly handle pathnames during copy operations, which might make it easier for remote attackers to execute arbitrary programs via unspecified vectors.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.014 (69.3th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x
- Google Chrome
- Linux Linux_kernel
- Microsoft Windows
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- chrome-cve-admin@google.com (x_refsource_CONFIRM)
- chrome-cve-admin@google.com (vendor-advisory, x_refsource_SUSE)
- chrome-cve-admin@google.com (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2013-0895?
- CVE-2013-0895 is a vulnerability in Apple Mac Os X, classified under Path Traversal. Published 2013-02-23.
- Is CVE-2013-0895 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.