Lucene search

[email protected]CVE-2012-2852

HistoryAug 06, 2012 - 3:55 p.m.

CVE-2012-2852

2012-08-0615:55:01

CWE-399

[email protected]

web.nvd.nist.gov

cve-2012-2852

google chrome

pdf

denial of service

use-after-free

mac os x

linux

windows

chrome frame

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.2%

JSON

The PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not properly handle object linkage, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted document.

Affected configurations

NVD

Node

googlechromeRange≤21.0.1180.56

googlechromeMatch21.0.1180.0

googlechromeMatch21.0.1180.1

googlechromeMatch21.0.1180.2

googlechromeMatch21.0.1180.31

googlechromeMatch21.0.1180.32

googlechromeMatch21.0.1180.33

googlechromeMatch21.0.1180.34

googlechromeMatch21.0.1180.35

googlechromeMatch21.0.1180.36

googlechromeMatch21.0.1180.37

googlechromeMatch21.0.1180.38

googlechromeMatch21.0.1180.39

googlechromeMatch21.0.1180.41

googlechromeMatch21.0.1180.46

googlechromeMatch21.0.1180.47

googlechromeMatch21.0.1180.48

googlechromeMatch21.0.1180.49

googlechromeMatch21.0.1180.50

googlechromeMatch21.0.1180.51

googlechromeMatch21.0.1180.52

googlechromeMatch21.0.1180.53

googlechromeMatch21.0.1180.54

googlechromeMatch21.0.1180.55

AND

applemac_os_x

linuxlinux_kernel

Node

googlechromeRange≤21.0.1180.59

googlechromeMatch21.0.1180.0

googlechromeMatch21.0.1180.1

googlechromeMatch21.0.1180.2

googlechromeMatch21.0.1180.31

googlechromeMatch21.0.1180.32

googlechromeMatch21.0.1180.33

googlechromeMatch21.0.1180.34

googlechromeMatch21.0.1180.35

googlechromeMatch21.0.1180.36

googlechromeMatch21.0.1180.37

googlechromeMatch21.0.1180.38

googlechromeMatch21.0.1180.39

googlechromeMatch21.0.1180.41

googlechromeMatch21.0.1180.46

googlechromeMatch21.0.1180.47

googlechromeMatch21.0.1180.48

googlechromeMatch21.0.1180.49

googlechromeMatch21.0.1180.50

googlechromeMatch21.0.1180.51

googlechromeMatch21.0.1180.52

googlechromeMatch21.0.1180.53

googlechromeMatch21.0.1180.54

googlechromeMatch21.0.1180.55

googlechromeMatch21.0.1180.56

googlechromeMatch21.0.1180.57

AND

googleframeMatch-

microsoftwindows

CPENameOperatorVersion
google:chromegoogle chromele21.0.1180.56
google:chromegoogle chromeeq21.0.1180.0
google:chromegoogle chromeeq21.0.1180.1
google:chromegoogle chromeeq21.0.1180.2
google:chromegoogle chromeeq21.0.1180.31
google:chromegoogle chromeeq21.0.1180.32
google:chromegoogle chromeeq21.0.1180.33
google:chromegoogle chromeeq21.0.1180.34
google:chromegoogle chromeeq21.0.1180.35
google:chromegoogle chromeeq21.0.1180.36

CPE	Name	Operator	Version
google:chrome	google chrome	le	21.0.1180.56
google:chrome	google chrome	eq	21.0.1180.0
google:chrome	google chrome	eq	21.0.1180.1
google:chrome	google chrome	eq	21.0.1180.2
google:chrome	google chrome	eq	21.0.1180.31
google:chrome	google chrome	eq	21.0.1180.32
google:chrome	google chrome	eq	21.0.1180.33
google:chrome	google chrome	eq	21.0.1180.34
google:chrome	google chrome	eq	21.0.1180.35
google:chrome	google chrome	eq	21.0.1180.36