CVE-2012-2825
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
Confidence
High
EPSS
Percentile
86.7%
The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| chrome | 20.0.1132.33 | cpe:/a:google:chrome:20.0.1132.33::: | |
| chrome | 20.0.1132.35 | cpe:/a:google:chrome:20.0.1132.35::: | |
| chrome | 20.0.1132.5 | cpe:/a:google:chrome:20.0.1132.5::: | |
| chrome | 20.0.1132.20 | cpe:/a:google:chrome:20.0.1132.20::: | |
| chrome | 20.0.1132.28 | cpe:/a:google:chrome:20.0.1132.28::: | |
| chrome | 20.0.1132.4 | cpe:/a:google:chrome:20.0.1132.4::: | |
| chrome | 20.0.1132.30 | cpe:/a:google:chrome:20.0.1132.30::: | |
| chrome | 20.0.1132.6 | cpe:/a:google:chrome:20.0.1132.6::: | |
| chrome | 20.0.1132.22 | cpe:/a:google:chrome:20.0.1132.22::: | |
| chrome | 20.0.1132.34 | cpe:/a:google:chrome:20.0.1132.34::: |
References
code.google.com/p/chromium/issues/detail?id=127417
googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html
lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
secunia.com/advisories/54886
support.apple.com/kb/HT5934
support.apple.com/kb/HT6001
hermes.opensuse.org/messages/15075728
www.suse.com/support/update/announcement/2013/suse-su-20131654-1.html
www.suse.com/support/update/announcement/2013/suse-su-20131656-1.html
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
Confidence
High
EPSS
Percentile
86.7%