CVE-2010-2298 (retired)

Priority
Description
browser/renderer_host/database_dispatcher_host.cc in Google Chrome before
5.0.375.70 on Linux does not properly handle ViewHostMsg_DatabaseOpenFile
messages in chroot-based sandboxing, which allows remote attackers to
bypass intended sandbox restrictions via vectors involving fchdir and chdir
calls.
Notes
 mdeslaur> chromium-specific
Package
Upstream:released (5.0.375.70)
More Information

Updated: 2019-08-23 08:38:58 UTC (commit 436fd4ed4cf0038ddd382cb8649607ace163dda7)