[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248268

 
 

909

 
 

195051

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Security bypass vulnerability in browser/renderer_host/database_dispatcher_host.cc in Google Chrome (rpm) before 5.0.375.70 on Linux.

ID: oval:org.secpod.oval:def:14Date: (C)2010-09-08   (M)2022-10-10
Class: VULNERABILITYFamily: unix




The host is installed with Google Chrome and is prone to security bypass vulnerability. A flaw is present in browser/renderer_host/database_dispatcher_host.cc, which does not properly handle ViewHostMsg_DatabaseOpenFile messages in chroot-based sandboxing. Successful exploitation allows remote attackers to bypass intended sandbox restrictions using vectors involving fchdir and chdir calls.

Platform:
Linux
Product:
Google Chrome
Reference:
CVE-2010-2298
CVE    1
CVE-2010-2298
CPE    419
cpe:/a:google:chrome:2.0.169.0
cpe:/a:google:chrome:5.0.354.1
cpe:/a:google:chrome:5.0.354.0
cpe:/a:google:chrome:2.0.169.1
...

© SecPod Technologies