CVE-2013-2905
The SharedMemory::Create function in memory/shared_memory_posix.cc in Google Chrome before 29.0...
The SharedMemory::Create function in memory/shared_memory_posix.cc in Google Chrome before 29.0.1547.57 uses weak permissions under /dev/shm/, which allows attackers to obtain sensitive information via direct access to a POSIX shared-memory file.
Exploit likelihood
What each source reports
NVD Score used
The SharedMemory::Create function in memory/shared_memory_posix.cc in Google Chrome before 29.0.1547.57 uses weak permissions under /dev/shm/, which allows attackers to obtain sensitive information via direct access to a POSIX shared-memory file.
- Record
CVE-2013-2905- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The SharedMemory::Create function in memory/shared_memory_posix.cc in Google Chrome before 29.0.1547.57 uses weak permissions under /dev/shm/, which allows attackers to obtain sensitive information via direct access to a POSIX shared-memory file.
- Record
CVE-2013-2905- Updated
- 2026-11-02
EUVDEUVD-2013-2844 No score
The SharedMemory::Create function in memory/shared_memory_posix.cc in Google Chrome before 29.0.1547.57 uses weak permissions under /dev/shm/, which allows attackers to obtain sensitive information via direct access to a POSIX shared-memory file.
- Record
EUVD-2013-2844- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h49q-wghx-7g75 No score
The SharedMemory::Create function in memory/shared_memory_posix.cc in Google Chrome before 29.0...
The SharedMemory::Create function in memory/shared_memory_posix.cc in Google Chrome before 29.0.1547.57 uses weak permissions under /dev/shm/, which allows attackers to obtain sensitive information via direct access to a POSIX shared-memory file.
- Record
GHSA-h49q-wghx-7g75- Updated
- 2026-11-02
OSVMGASA-2013-0278 No score
Updated chromium-browser-stable package fix security vulnerabilities
The chrome 29 development team found various issues from internal fuzzing audits, and other studies (CVE-2013-2887).
Krystian Bigaj discovered a file handling path sanitization issue (CVE-2013-2900).
Alex Chapman discovered an integer overflow issue in ANGLE, the Almost Native Graphics Layer (CVE-2013-2901).
cloudfuzzer discovered a use-after-free issue in XSLT (CVE-2013-2902).
cloudfuzzer discovered a use-after-free issue in HTMLMediaElement (CVE-2013-2903).
cloudfuzzer discovered a use-after-free issue in XML document parsing (CVE-2013-2904).
Christian Jaeger discovered an information leak due to insufficient file permissions (CVE-2013-2905).
- Record
MGASA-2013-0278- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromium-browserDebian:7 From an advisory covering 7 CVEs |
before 29.0.1547.57-1~deb7u1, plus listed versions 26.0.1410.43-127.0.1453.110-127.0.1453.110-1~deb7u127.0.1453.110-227.0.1453.93-1 Show 8 moreShow less27.0.1453.93-1~deb7u128.0.1500.71-128.0.1500.71-1~deb7u128.0.1500.71-228.0.1500.95-128.0.1500.95-1~deb7u128.0.1500.95-228.0.1500.95-3 |
29.0.1547.57-1~deb7u1 |
chromium-browser-stableMageia:2 From an advisory covering 7 CVEs |
before 29.0.1547.65-1.mga2 | 29.0.1547.65-1.mga2 |
chromium-browser-stableMageia:3 From an advisory covering 7 CVEs |
before 29.0.1547.65-1.mga3 | 29.0.1547.65-1.mga3 |
chromium-browser-stableMageia:3 From an advisory covering 7 CVEs |
before 29.0.1547.65-1.mga3.tainted | 29.0.1547.65-1.mga3.tainted |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2905 is a medium vulnerability (CVSS 5.0) in Google Chrome, published August 21, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.84%, the 58th percentile. No source names a fixed version.
