Endpoint Vulnerability

Google Chrome CVE-2013-2900 Path Traversal Vulnerability

Description

The FilePath::ReferencesParent function in files/file_path.cc in Google Chrome before 29.0.1547.57 on Windows does not properly handle pathname components composed entirely of . (dot) and whitespace characters, which allows remote attackers to conduct directory traversal attacks via a crafted directory name.

Affected Applications

Google Chrome

Version Updates

Date	Version	Status	Detail
2019-09-11	1.00194	Modified	Google Chrome
2019-03-12	1.00182	Modified	Google Chrome
2018-04-10	1.00157	Modified	Google Chrome
2018-02-15	1.00155	Modified	Google Chrome
2017-12-13	1.00152	Modified	Google Chrome
2017-07-25	1.00142	Modified	Google Chrome