Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGO_RC_FILE environment variable, which allows attackers to bypass intended access restrictions via crafted configuration data.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published: 2013-04-10T16:00:00Z

Updated: 2024-09-17T03:23:19.414Z

Reserved: 2013-01-07T00:00:00Z

Link: CVE-2013-0927

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2013-04-10T16:55:04.810

Modified: 2023-11-07T02:14:32.460

Link: CVE-2013-0927

cve-icon Redhat

No data.