Information disclosure vulnerability in Google Chrome via overly broad permissions on shared memory files (rpm)ID: oval:org.secpod.oval:def:14982 | Date: (C)2013-09-01 (M)2023-11-16 |
Class: VULNERABILITY | Family: unix |
The host is installed with Google Chrome before 29.0.1547.57 and is prone to information disclosure vulnerability. A flaw is present in the application, which fails to properly handle permissions under /dev/shm/. Successful exploitation allows attackers to obtain sensitive information via direct access to a POSIX shared-memory file.