The SharedMemory::Create function in memory/shared_memory_posix.cc in Google Chrome before 29.0.1547.57 uses weak permissions under /dev/shm/, which allows attackers to obtain sensitive information via direct access to a POSIX shared-memory file.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Debian_linux | Debian | 7.0 (including) | 7.0 (including) |
Chromium-browser | Ubuntu | lucid | * |
Chromium-browser | Ubuntu | precise | * |
Chromium-browser | Ubuntu | quantal | * |
Chromium-browser | Ubuntu | raring | * |
Chromium-browser | Ubuntu | upstream | * |