Lucene search
ChromeCVE-2012-2878HistorySep 26, 2012 - 10:56 a.m.
CVE-2012-2878
2012-09-2610:56:04
CWE-399
Chrome
web.nvd.nist.gov
37
cve-2012-2878
google chrome
vulnerability
denial of service
remote attackers
plug-in handling
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
9.2
Confidence
High
EPSS
0.007
Percentile
79.8%
Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to plug-in handling.
Affected configurations
Node
opensuseopensuseMatch12.1
ORopensuseopensuseMatch12.2
Node
googlechromeRange≤22.0.1229.78
ORgooglechromeMatch22.0.1229.0
ORgooglechromeMatch22.0.1229.1
ORgooglechromeMatch22.0.1229.2
ORgooglechromeMatch22.0.1229.3
ORgooglechromeMatch22.0.1229.4
ORgooglechromeMatch22.0.1229.6
ORgooglechromeMatch22.0.1229.7
ORgooglechromeMatch22.0.1229.8
ORgooglechromeMatch22.0.1229.9
ORgooglechromeMatch22.0.1229.10
ORgooglechromeMatch22.0.1229.11
ORgooglechromeMatch22.0.1229.12
ORgooglechromeMatch22.0.1229.14
ORgooglechromeMatch22.0.1229.16
ORgooglechromeMatch22.0.1229.17
ORgooglechromeMatch22.0.1229.18
ORgooglechromeMatch22.0.1229.20
ORgooglechromeMatch22.0.1229.21
ORgooglechromeMatch22.0.1229.22
ORgooglechromeMatch22.0.1229.23
ORgooglechromeMatch22.0.1229.24
ORgooglechromeMatch22.0.1229.25
ORgooglechromeMatch22.0.1229.26
ORgooglechromeMatch22.0.1229.27
ORgooglechromeMatch22.0.1229.28
ORgooglechromeMatch22.0.1229.29
ORgooglechromeMatch22.0.1229.31
ORgooglechromeMatch22.0.1229.32
ORgooglechromeMatch22.0.1229.33
ORgooglechromeMatch22.0.1229.35
ORgooglechromeMatch22.0.1229.36
ORgooglechromeMatch22.0.1229.37
ORgooglechromeMatch22.0.1229.39
ORgooglechromeMatch22.0.1229.48
ORgooglechromeMatch22.0.1229.49
ORgooglechromeMatch22.0.1229.50
ORgooglechromeMatch22.0.1229.51
ORgooglechromeMatch22.0.1229.52
ORgooglechromeMatch22.0.1229.53
ORgooglechromeMatch22.0.1229.54
ORgooglechromeMatch22.0.1229.55
ORgooglechromeMatch22.0.1229.56
ORgooglechromeMatch22.0.1229.57
ORgooglechromeMatch22.0.1229.58
ORgooglechromeMatch22.0.1229.59
ORgooglechromeMatch22.0.1229.60
ORgooglechromeMatch22.0.1229.62
ORgooglechromeMatch22.0.1229.63
ORgooglechromeMatch22.0.1229.64
ORgooglechromeMatch22.0.1229.65
ORgooglechromeMatch22.0.1229.67
ORgooglechromeMatch22.0.1229.76
| Vendor | Product | Version | CPE |
|---|---|---|---|
| opensuse | opensuse | 12.1 | cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:* |
| opensuse | opensuse | 12.2 | cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:* |
| chrome | * | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | |
| chrome | 22.0.1229.0 | cpe:2.3:a:google:chrome:22.0.1229.0:*:*:*:*:*:*:* | |
| chrome | 22.0.1229.1 | cpe:2.3:a:google:chrome:22.0.1229.1:*:*:*:*:*:*:* | |
| chrome | 22.0.1229.2 | cpe:2.3:a:google:chrome:22.0.1229.2:*:*:*:*:*:*:* | |
| chrome | 22.0.1229.3 | cpe:2.3:a:google:chrome:22.0.1229.3:*:*:*:*:*:*:* | |
| chrome | 22.0.1229.4 | cpe:2.3:a:google:chrome:22.0.1229.4:*:*:*:*:*:*:* | |
| chrome | 22.0.1229.6 | cpe:2.3:a:google:chrome:22.0.1229.6:*:*:*:*:*:*:* | |
| chrome | 22.0.1229.7 | cpe:2.3:a:google:chrome:22.0.1229.7:*:*:*:*:*:*:* |
References
googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html
lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html
code.google.com/p/chromium/issues/detail?id=137852
exchange.xforce.ibmcloud.com/vulnerabilities/78837
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15783
Related
cvelist
cvelist
CVE-2012-2878
2012-09-26 10:00:00
nvd
nvd
CVE-2012-2878
2012-09-26 10:56:04
prion
prion
Design/Logic Flaw
2012-09-26 10:56:00
debiancve
debiancve
CVE-2012-2878
2012-09-26 10:56:00
ubuntucve
ubuntucve
CVE-2012-2878
2012-09-26 00:00:00
suse
suse
update for chromium (important)
2012-10-22 12:08:44
openvas
openvas
openSUSE: Security Advisory for update (openSUSE-SU-2012:1376-1)
2012-12-13 00:00:00
SuSE Update for update openSUSE-SU-2012:1376-1 (update)
2012-12-13 00:00:00
FreeBSD Ports: chromium
2012-10-03 00:00:00
nessus
nessus
openSUSE Security Update : chromium (openSUSE-SU-2012:1376-1)
2014-06-13 00:00:00
FreeBSD : chromium -- multiple vulnerabilities (5bae2ab4-0820-11e2-be5f-00262d5ed8ee)
2012-09-27 00:00:00
Google Chrome < 22.0.1229.79 Multiple Vulnerabilities
2012-09-26 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2012-09-25 00:00:00
threatpost
threatpost
Google Releases Chrome 22 and Pays Out Nearly $30K in Rewards
2012-09-26 14:16:00
chrome
chrome
Stable Channel Update
2012-09-25 00:00:00
gentoo
gentoo
Chromium: Multiple vulnerabilities
2012-10-21 00:00:00
osv
osv
chromedriver-55.0.2883.75-3.1 on GA media
2024-06-15 00:00:00
ungoogled-chromium-113.0.5672.92-1.1 on GA media
2024-06-15 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
9.2
Confidence
High
EPSS
0.007
Percentile
79.8%
Related for CVE-2012-2878