Lucene search

[email protected]CVE-2012-2847

HistoryAug 06, 2012 - 3:55 p.m.

CVE-2012-2847

2012-08-0615:55:01

CWE-399

[email protected]

web.nvd.nist.gov

google chrome

cve-2012-2847

denial of service

resource consumption

security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.1 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.2%

JSON

Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not request user confirmation before continuing a large series of downloads, which allows user-assisted remote attackers to cause a denial of service (resource consumption) via a crafted web site.

Affected configurations

NVD

Node

googlechromeRange≤21.0.1180.56

googlechromeMatch21.0.1180.0

googlechromeMatch21.0.1180.1

googlechromeMatch21.0.1180.2

googlechromeMatch21.0.1180.31

googlechromeMatch21.0.1180.32

googlechromeMatch21.0.1180.33

googlechromeMatch21.0.1180.34

googlechromeMatch21.0.1180.35

googlechromeMatch21.0.1180.36

googlechromeMatch21.0.1180.37

googlechromeMatch21.0.1180.38

googlechromeMatch21.0.1180.39

googlechromeMatch21.0.1180.41

googlechromeMatch21.0.1180.46

googlechromeMatch21.0.1180.47

googlechromeMatch21.0.1180.48

googlechromeMatch21.0.1180.49

googlechromeMatch21.0.1180.50

googlechromeMatch21.0.1180.51

googlechromeMatch21.0.1180.52

googlechromeMatch21.0.1180.53

googlechromeMatch21.0.1180.54

googlechromeMatch21.0.1180.55

AND

applemac_os_x

linuxlinux_kernel

Node

googlechromeRange≤21.0.1180.59

googlechromeMatch21.0.1180.0

googlechromeMatch21.0.1180.1

googlechromeMatch21.0.1180.2

googlechromeMatch21.0.1180.31

googlechromeMatch21.0.1180.32

googlechromeMatch21.0.1180.33

googlechromeMatch21.0.1180.34

googlechromeMatch21.0.1180.35

googlechromeMatch21.0.1180.36

googlechromeMatch21.0.1180.37

googlechromeMatch21.0.1180.38

googlechromeMatch21.0.1180.39

googlechromeMatch21.0.1180.41

googlechromeMatch21.0.1180.46

googlechromeMatch21.0.1180.47

googlechromeMatch21.0.1180.48

googlechromeMatch21.0.1180.49

googlechromeMatch21.0.1180.50

googlechromeMatch21.0.1180.51

googlechromeMatch21.0.1180.52

googlechromeMatch21.0.1180.53

googlechromeMatch21.0.1180.54

googlechromeMatch21.0.1180.55

googlechromeMatch21.0.1180.56

googlechromeMatch21.0.1180.57

AND

googleframeMatch-

microsoftwindows

CPENameOperatorVersion
google:chromegoogle chromele21.0.1180.56
google:chromegoogle chromeeq21.0.1180.0
google:chromegoogle chromeeq21.0.1180.1
google:chromegoogle chromeeq21.0.1180.2
google:chromegoogle chromeeq21.0.1180.31
google:chromegoogle chromeeq21.0.1180.32
google:chromegoogle chromeeq21.0.1180.33
google:chromegoogle chromeeq21.0.1180.34
google:chromegoogle chromeeq21.0.1180.35
google:chromegoogle chromeeq21.0.1180.36

CPE	Name	Operator	Version
google:chrome	google chrome	le	21.0.1180.56
google:chrome	google chrome	eq	21.0.1180.0
google:chrome	google chrome	eq	21.0.1180.1
google:chrome	google chrome	eq	21.0.1180.2
google:chrome	google chrome	eq	21.0.1180.31
google:chrome	google chrome	eq	21.0.1180.32
google:chrome	google chrome	eq	21.0.1180.33
google:chrome	google chrome	eq	21.0.1180.34
google:chrome	google chrome	eq	21.0.1180.35
google:chrome	google chrome	eq	21.0.1180.36