Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-6652


Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome before 33.0.1750.117 on Windows allows attackers to bypass intended named-pipe policy restrictions in the sandbox via vectors related to (1) lack of checks for .. (dot dot) sequences or (2) lack of use of the \\?\ protection mechanism.


Published

2014-02-24T04:48:09.897

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-22

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application google chrome ≤ 33.0.1750.116 Yes
Application google chrome 33.0.1750.0 Yes
Application google chrome 33.0.1750.1 Yes
Application google chrome 33.0.1750.2 Yes
Application google chrome 33.0.1750.3 Yes
Application google chrome 33.0.1750.4 Yes
Application google chrome 33.0.1750.5 Yes
Application google chrome 33.0.1750.6 Yes
Application google chrome 33.0.1750.7 Yes
Application google chrome 33.0.1750.8 Yes
Application google chrome 33.0.1750.9 Yes
Application google chrome 33.0.1750.10 Yes
Application google chrome 33.0.1750.11 Yes
Application google chrome 33.0.1750.12 Yes
Application google chrome 33.0.1750.13 Yes
Application google chrome 33.0.1750.14 Yes
Application google chrome 33.0.1750.15 Yes
Application google chrome 33.0.1750.16 Yes
Application google chrome 33.0.1750.18 Yes
Application google chrome 33.0.1750.19 Yes
Application google chrome 33.0.1750.20 Yes
Application google chrome 33.0.1750.21 Yes
Application google chrome 33.0.1750.22 Yes
Application google chrome 33.0.1750.23 Yes
Application google chrome 33.0.1750.24 Yes
Application google chrome 33.0.1750.25 Yes
Application google chrome 33.0.1750.26 Yes
Application google chrome 33.0.1750.27 Yes
Application google chrome 33.0.1750.28 Yes
Application google chrome 33.0.1750.29 Yes
Application google chrome 33.0.1750.30 Yes
Application google chrome 33.0.1750.31 Yes
Application google chrome 33.0.1750.34 Yes
Application google chrome 33.0.1750.35 Yes
Application google chrome 33.0.1750.36 Yes
Application google chrome 33.0.1750.37 Yes
Application google chrome 33.0.1750.38 Yes
Application google chrome 33.0.1750.39 Yes
Application google chrome 33.0.1750.40 Yes
Application google chrome 33.0.1750.41 Yes
Application google chrome 33.0.1750.42 Yes
Application google chrome 33.0.1750.43 Yes
Application google chrome 33.0.1750.44 Yes
Application google chrome 33.0.1750.45 Yes
Application google chrome 33.0.1750.46 Yes
Application google chrome 33.0.1750.47 Yes
Application google chrome 33.0.1750.48 Yes
Application google chrome 33.0.1750.49 Yes
Application google chrome 33.0.1750.50 Yes
Application google chrome 33.0.1750.51 Yes
Application google chrome 33.0.1750.52 Yes
Application google chrome 33.0.1750.53 Yes
Application google chrome 33.0.1750.54 Yes
Application google chrome 33.0.1750.55 Yes
Application google chrome 33.0.1750.56 Yes
Application google chrome 33.0.1750.57 Yes
Application google chrome 33.0.1750.58 Yes
Application google chrome 33.0.1750.59 Yes
Application google chrome 33.0.1750.60 Yes
Application google chrome 33.0.1750.61 Yes
Application google chrome 33.0.1750.62 Yes
Application google chrome 33.0.1750.63 Yes
Application google chrome 33.0.1750.64 Yes
Application google chrome 33.0.1750.65 Yes
Application google chrome 33.0.1750.66 Yes
Application google chrome 33.0.1750.67 Yes
Application google chrome 33.0.1750.68 Yes
Application google chrome 33.0.1750.69 Yes
Application google chrome 33.0.1750.70 Yes
Application google chrome 33.0.1750.71 Yes
Application google chrome 33.0.1750.73 Yes
Application google chrome 33.0.1750.74 Yes
Application google chrome 33.0.1750.75 Yes
Application google chrome 33.0.1750.76 Yes
Application google chrome 33.0.1750.77 Yes
Application google chrome 33.0.1750.79 Yes
Application google chrome 33.0.1750.80 Yes
Application google chrome 33.0.1750.81 Yes
Application google chrome 33.0.1750.82 Yes
Application google chrome 33.0.1750.83 Yes
Application google chrome 33.0.1750.85 Yes
Application google chrome 33.0.1750.88 Yes
Application google chrome 33.0.1750.89 Yes
Application google chrome 33.0.1750.90 Yes
Application google chrome 33.0.1750.91 Yes
Application google chrome 33.0.1750.92 Yes
Application google chrome 33.0.1750.93 Yes
Application google chrome 33.0.1750.104 Yes
Application google chrome 33.0.1750.106 Yes
Application google chrome 33.0.1750.107 Yes
Application google chrome 33.0.1750.108 Yes
Application google chrome 33.0.1750.109 Yes
Application google chrome 33.0.1750.110 Yes
Application google chrome 33.0.1750.111 Yes
Application google chrome 33.0.1750.112 Yes
Application google chrome 33.0.1750.113 Yes
Application google chrome 33.0.1750.115 Yes
Operating System microsoft windows * No

References