Lucene search
ChromeCVE-2012-5121HistoryNov 07, 2012 - 11:43 a.m.
CVE-2012-5121
2012-11-0711:43:15
CWE-416
Chrome
web.nvd.nist.gov
39
cve-2012-5121
google chrome
vulnerability
denial of service
remote attackers
video layout
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
9.3
Confidence
High
EPSS
0.013
Percentile
85.6%
Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to video layout.
Affected configurations
Node
googlechromeRange≤23.0.1271.62
ORgooglechromeMatch23.0.1271.0
ORgooglechromeMatch23.0.1271.1
ORgooglechromeMatch23.0.1271.2
ORgooglechromeMatch23.0.1271.3
ORgooglechromeMatch23.0.1271.4
ORgooglechromeMatch23.0.1271.5
ORgooglechromeMatch23.0.1271.6
ORgooglechromeMatch23.0.1271.7
ORgooglechromeMatch23.0.1271.8
ORgooglechromeMatch23.0.1271.9
ORgooglechromeMatch23.0.1271.10
ORgooglechromeMatch23.0.1271.11
ORgooglechromeMatch23.0.1271.12
ORgooglechromeMatch23.0.1271.13
ORgooglechromeMatch23.0.1271.14
ORgooglechromeMatch23.0.1271.15
ORgooglechromeMatch23.0.1271.16
ORgooglechromeMatch23.0.1271.17
ORgooglechromeMatch23.0.1271.18
ORgooglechromeMatch23.0.1271.19
ORgooglechromeMatch23.0.1271.20
ORgooglechromeMatch23.0.1271.21
ORgooglechromeMatch23.0.1271.22
ORgooglechromeMatch23.0.1271.23
ORgooglechromeMatch23.0.1271.24
ORgooglechromeMatch23.0.1271.26
ORgooglechromeMatch23.0.1271.30
ORgooglechromeMatch23.0.1271.31
ORgooglechromeMatch23.0.1271.32
ORgooglechromeMatch23.0.1271.33
ORgooglechromeMatch23.0.1271.35
ORgooglechromeMatch23.0.1271.36
ORgooglechromeMatch23.0.1271.37
ORgooglechromeMatch23.0.1271.38
ORgooglechromeMatch23.0.1271.39
ORgooglechromeMatch23.0.1271.40
ORgooglechromeMatch23.0.1271.41
ORgooglechromeMatch23.0.1271.44
ORgooglechromeMatch23.0.1271.45
ORgooglechromeMatch23.0.1271.46
ORgooglechromeMatch23.0.1271.49
ORgooglechromeMatch23.0.1271.50
ORgooglechromeMatch23.0.1271.51
ORgooglechromeMatch23.0.1271.52
ORgooglechromeMatch23.0.1271.53
ORgooglechromeMatch23.0.1271.54
ORgooglechromeMatch23.0.1271.55
ORgooglechromeMatch23.0.1271.56
ORgooglechromeMatch23.0.1271.57
ORgooglechromeMatch23.0.1271.58
ORgooglechromeMatch23.0.1271.59
ORgooglechromeMatch23.0.1271.60
ORgooglechromeMatch23.0.1271.61
| Vendor | Product | Version | CPE |
|---|---|---|---|
| chrome | * | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | |
| chrome | 23.0.1271.0 | cpe:2.3:a:google:chrome:23.0.1271.0:*:*:*:*:*:*:* | |
| chrome | 23.0.1271.1 | cpe:2.3:a:google:chrome:23.0.1271.1:*:*:*:*:*:*:* | |
| chrome | 23.0.1271.2 | cpe:2.3:a:google:chrome:23.0.1271.2:*:*:*:*:*:*:* | |
| chrome | 23.0.1271.3 | cpe:2.3:a:google:chrome:23.0.1271.3:*:*:*:*:*:*:* | |
| chrome | 23.0.1271.4 | cpe:2.3:a:google:chrome:23.0.1271.4:*:*:*:*:*:*:* | |
| chrome | 23.0.1271.5 | cpe:2.3:a:google:chrome:23.0.1271.5:*:*:*:*:*:*:* | |
| chrome | 23.0.1271.6 | cpe:2.3:a:google:chrome:23.0.1271.6:*:*:*:*:*:*:* | |
| chrome | 23.0.1271.7 | cpe:2.3:a:google:chrome:23.0.1271.7:*:*:*:*:*:*:* | |
| chrome | 23.0.1271.8 | cpe:2.3:a:google:chrome:23.0.1271.8:*:*:*:*:*:*:* |
References
googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html
osvdb.org/87073
www.securityfocus.com/bid/56413
code.google.com/p/chromium/issues/detail?id=154055
exchange.xforce.ibmcloud.com/vulnerabilities/79868
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15957
Related
cvelist
cvelist
CVE-2012-5121
2012-11-07 11:00:00
debiancve
debiancve
CVE-2012-5121
2012-11-07 11:43:00
nvd
nvd
CVE-2012-5121
2012-11-07 11:43:15
ubuntucve
ubuntucve
CVE-2012-5121
2012-11-07 00:00:00
prion
prion
Design/Logic Flaw
2012-11-07 11:43:00
nessus
nessus
Google Chrome < 23.0.1271.64 Multiple Vulnerabilities
2012-11-12 00:00:00
Google Chrome < 23.0.1271.64 Multiple Vulnerabilities
2012-11-08 00:00:00
Google Chrome < 23.0.1271.64 Multiple Vulnerabilities
2012-11-12 00:00:00
openvas
openvas
Google Chrome Multiple Vulnerabilities - Nov2012 (Linux)
2012-11-09 00:00:00
Google Chrome Multiple Vulnerabilities - Nov2012 (Windows)
2012-11-09 00:00:00
Google Chrome Multiple Vulnerabilities (Nov 2012) - Linux
2012-11-09 00:00:00
chrome
chrome
Stable Channel Release and Beta Channel Update
2012-11-06 00:00:00
threatpost
threatpost
Google Patches 14 Flaws in Chrome 23
2012-11-06 18:36:58
freebsd
freebsd
chromium -- multiple vulnerabilities
2012-11-06 00:00:00
thn
thn
Chrome 23 Released, 14 vulnerabilities patched
2012-11-06 19:30:00
kitploit
kitploit
Radamsa - A General-Purpose Fuzzer
2024-03-25 11:30:00
gentoo
gentoo
Chromium, V8: Multiple vulnerabilities
2013-09-24 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
9.3
Confidence
High
EPSS
0.013
Percentile
85.6%
Related for CVE-2012-5121