CVE-2011-2782

Publication date 3 August 2011

Last updated 24 July 2024


Ubuntu priority

The drag-and-drop implementation in Google Chrome before 13.0.782.107 on Linux does not properly enforce permissions for files, which allows user-assisted remote attackers to bypass intended access restrictions via unspecified vectors.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
chromium-browser 11.10 oneiric
Not affected
11.04 natty
Fixed 14.0.835.202~r103287-0ubuntu0.11.04.1
10.10 maverick
Fixed 14.0.835.202~r103287-0ubuntu0.10.10.1
10.04 LTS lucid
Fixed 14.0.835.202~r103287-0ubuntu0.10.04.2
8.04 LTS hardy Not in release