CVE-2013-2905

Priority
Medium
Description
The SharedMemory::Create function in memory/shared_memory_posix.cc in
Google Chrome before 29.0.1547.57 uses weak permissions under /dev/shm/,
which allows attackers to obtain sensitive information via direct access to
a POSIX shared-memory file.
References
Assigned-to
chad
Package
Upstream:released (29.0.1547.57)
Ubuntu 12.04 LTS (Precise Pangolin):released (30.0.1599.114-0ubuntu0.12.04.3)
Ubuntu 14.04 LTS (Trusty Tahr):not-affected (29.0.1547.65-0ubuntu2)
More Information

Valid XHTML 1.0 Strict

Updated: 2015-07-29 20:41:44 UTC (commit 9756)