VULNERABILITY INTELLIGENCE
CVE-2013-0927
CVSS score7.5 HIGH
EPSS probability0.83%
CISA KEVNot currently listed
Published2013-04-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGO_RC_FILE environment variable, which allows attackers to bypass intended access restrictions via crafted configuration data.
Weakness classification
- CWE-59: Improper Link Resolution Before File Access ('Link Following')