Vulnerability in Google Chrome Os

CVE-2013-0927

Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGO_RC_FILE environment variable, which allows attackers to bypass intended access restrictions via crafted configuration data.

EPSS: 0.008 (54.0th percentile) — read the EPSS interpretation.

Affected products

  • Google Chrome_os — versions 26.0.1410.0, 26.0.1410.1, 26.0.1410.3
  • N/a — versions n/a

Weakness classification (CWE)

References