NetSight
IP …
medium5.0

CVE-2013-2905

The SharedMemory::Create function in memory/shared_memory_posix.cc in Google Chrome before 29.0.1547.57 uses weak permissions under /dev/shm/, which allows att…

Impact

The SharedMemory::Create function in memory/shared_memory_posix.cc in Google Chrome before 29.0.1547.57 uses weak permissions under /dev/shm/, which allows attackers to obtain sensitive information via direct access to a POSIX shared-memory file.

Affected products

VendorProductAffected versions
DebianDebian Linux
Version 7.0
GoogleChrome
through 29.0.1547.56
Versions 29.0.1547.0, 29.0.1547.1, 29.0.1547.2, 29.0.1547.3, 29.0.1547.4

Weakness classification

CWE-264

References