CVE-2013-0927: High severity Google Chrome OS vulnerability
Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c readconfig implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGORCFILE environment variable, which allows attackers to bypass intended access restrictions via crafted configuration data.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0927?
CVE-2013-0927 has been classified as a high-severity vulnerability due to its potential to bypass access restrictions.
How do I fix CVE-2013-0927?
To fix CVE-2013-0927, update Google Chrome OS to version 26.0.1410.57 or later.
Which versions of Chrome OS are affected by CVE-2013-0927?
CVE-2013-0927 affects Google Chrome OS versions prior to 26.0.1410.57.
What kind of attacks can exploit CVE-2013-0927?
CVE-2013-0927 can be exploited by attackers to gain unauthorized access to sensitive information in the user's home directory.
Is there a workaround for CVE-2013-0927 while I wait to update?
Currently, there are no known workarounds for CVE-2013-0927; updating to the patched version is the only effective measure.