Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-5376
HistoryOct 11, 2012 - 12:00 a.m.

CVE-2012-5376

2012-10-1100:00:00
ubuntu.com
ubuntu.com
16

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS

0.078

Percentile

94.3%

The Inter-process Communication (IPC) implementation in Google Chrome
before 22.0.1229.94 allows remote attackers to bypass intended sandbox
restrictions and write to arbitrary files by leveraging access to a
renderer process, a different vulnerability than CVE-2012-5112.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchchromium-browser< 3.0.1271.97-0ubuntu0.10.04.1UNKNOWN
ubuntu11.10noarchchromium-browser< 3.0.1271.97-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchchromium-browser< 3.0.1271.97-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchchromium-browser< 3.0.1271.97-0ubuntu0.12.10.1UNKNOWN

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS

0.078

Percentile

94.3%