Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome before 33.0.1750.117 on Windows allows attackers to bypass intended named-pipe policy restrictions in the sandbox via vectors related to (1) lack of checks for .. (dot dot) sequences or (2) lack of use of the \\?\ protection mechanism.
Advisories
Source ID Title
EUVD EUVD EUVD-2013-6454 Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome before 33.0.1750.117 on Windows allows attackers to bypass intended named-pipe policy restrictions in the sandbox via vectors related to (1) lack of checks for .. (dot dot) sequences or (2) lack of use of the \\?\ protection mechanism.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-06T17:46:22.407Z

Reserved: 2013-11-05T00:00:00

Link: CVE-2013-6652

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2014-02-24T04:48:09.897

Modified: 2025-04-11T00:51:21.963

Link: CVE-2013-6652

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses