CVE

Id
50694  
CVE No.
CVE-2011-2782  
Status
Candidate  
Description
The drag-and-drop implementation in Google Chrome before 13.0.782.107 on Linux does not properly enforce permissions for files, which allows user-assisted remote attackers to bypass intended access restrictions via unspecified vectors.  
Phase
Assigned (20110720)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
547326 50694 CVE-2011-2782 CONFIRM:http://code.google.com/p/chromium/issues/detail?id=81307  View
547327 50694 CVE-2011-2782 CONFIRM:http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html  View
547328 50694 CVE-2011-2782 OSVDB:74232  View
547329 50694 CVE-2011-2782 URL:http://osvdb.org/74232  View
547330 50694 CVE-2011-2782 OVAL:oval:org.mitre.oval:def:14100  View
547331 50694 CVE-2011-2782 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14100  View
547332 50694 CVE-2011-2782 XF:google-chrome-drop-insecure-permissions(68944)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
32719 JVNDB-2011-002959 Google Chrome におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 Google Chrome には、GPU lock に関するリエントラント処理に不備があるため、サービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2011-2787 50694 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002959.html  View