Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGO_RC_FILE environment variable, which allows attackers to bypass intended access restrictions via crafted configuration data.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Google Chrome OS 未明安全漏洞
Vulnerability Description
Google Chrome OS是美国谷歌（Google）公司开发的一套基于Web的快速、轻量型的开源操作系统。 Google Chrome OS 26.0.1410.57之前的版本中存在漏洞，该漏洞源于程序依靠Pango函数库的pango-utils.c中的read_config函数实现对用户的主目录中的.pangorc文件的内容以及被‘PANGO_RC_FILE’环境变量所引用的文件进行加载。通过特制的配置数据，攻击者可利用该漏洞绕过预期的访问限制。
CVSS Information
N/A
Vulnerability Type
N/A