Lucene search
ChromeCVE-2012-2892HistorySep 26, 2012 - 10:56 a.m.
CVE-2012-2892
2012-09-2610:56:05
Chrome
web.nvd.nist.gov
35
cve-2012-2892
vulnerability
google chrome
pop-up blocker
remote attackers
bypass
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
8.7
Confidence
High
EPSS
0.005
Percentile
77.1%
Unspecified vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to bypass the pop-up blocker via unknown vectors.
Affected configurations
Node
googlechromeRange≤22.0.1229.78
ORgooglechromeMatch22.0.1229.0
ORgooglechromeMatch22.0.1229.1
ORgooglechromeMatch22.0.1229.2
ORgooglechromeMatch22.0.1229.3
ORgooglechromeMatch22.0.1229.4
ORgooglechromeMatch22.0.1229.6
ORgooglechromeMatch22.0.1229.7
ORgooglechromeMatch22.0.1229.8
ORgooglechromeMatch22.0.1229.9
ORgooglechromeMatch22.0.1229.10
ORgooglechromeMatch22.0.1229.11
ORgooglechromeMatch22.0.1229.12
ORgooglechromeMatch22.0.1229.14
ORgooglechromeMatch22.0.1229.16
ORgooglechromeMatch22.0.1229.17
ORgooglechromeMatch22.0.1229.18
ORgooglechromeMatch22.0.1229.20
ORgooglechromeMatch22.0.1229.21
ORgooglechromeMatch22.0.1229.22
ORgooglechromeMatch22.0.1229.23
ORgooglechromeMatch22.0.1229.24
ORgooglechromeMatch22.0.1229.25
ORgooglechromeMatch22.0.1229.26
ORgooglechromeMatch22.0.1229.27
ORgooglechromeMatch22.0.1229.28
ORgooglechromeMatch22.0.1229.29
ORgooglechromeMatch22.0.1229.31
ORgooglechromeMatch22.0.1229.32
ORgooglechromeMatch22.0.1229.33
ORgooglechromeMatch22.0.1229.35
ORgooglechromeMatch22.0.1229.36
ORgooglechromeMatch22.0.1229.37
ORgooglechromeMatch22.0.1229.39
ORgooglechromeMatch22.0.1229.48
ORgooglechromeMatch22.0.1229.49
ORgooglechromeMatch22.0.1229.50
ORgooglechromeMatch22.0.1229.51
ORgooglechromeMatch22.0.1229.52
ORgooglechromeMatch22.0.1229.53
ORgooglechromeMatch22.0.1229.54
ORgooglechromeMatch22.0.1229.55
ORgooglechromeMatch22.0.1229.56
ORgooglechromeMatch22.0.1229.57
ORgooglechromeMatch22.0.1229.58
ORgooglechromeMatch22.0.1229.59
ORgooglechromeMatch22.0.1229.60
ORgooglechromeMatch22.0.1229.62
ORgooglechromeMatch22.0.1229.63
ORgooglechromeMatch22.0.1229.64
ORgooglechromeMatch22.0.1229.65
ORgooglechromeMatch22.0.1229.67
ORgooglechromeMatch22.0.1229.76
| Vendor | Product | Version | CPE |
|---|---|---|---|
| chrome | * | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | |
| chrome | 22.0.1229.0 | cpe:2.3:a:google:chrome:22.0.1229.0:*:*:*:*:*:*:* | |
| chrome | 22.0.1229.1 | cpe:2.3:a:google:chrome:22.0.1229.1:*:*:*:*:*:*:* | |
| chrome | 22.0.1229.2 | cpe:2.3:a:google:chrome:22.0.1229.2:*:*:*:*:*:*:* | |
| chrome | 22.0.1229.3 | cpe:2.3:a:google:chrome:22.0.1229.3:*:*:*:*:*:*:* | |
| chrome | 22.0.1229.4 | cpe:2.3:a:google:chrome:22.0.1229.4:*:*:*:*:*:*:* | |
| chrome | 22.0.1229.6 | cpe:2.3:a:google:chrome:22.0.1229.6:*:*:*:*:*:*:* | |
| chrome | 22.0.1229.7 | cpe:2.3:a:google:chrome:22.0.1229.7:*:*:*:*:*:*:* | |
| chrome | 22.0.1229.8 | cpe:2.3:a:google:chrome:22.0.1229.8:*:*:*:*:*:*:* | |
| chrome | 22.0.1229.9 | cpe:2.3:a:google:chrome:22.0.1229.9:*:*:*:*:*:*:* |
References
googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html
lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html
code.google.com/p/chromium/issues/detail?id=144704
exchange.xforce.ibmcloud.com/vulnerabilities/78843
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15807
Related
ubuntucve
ubuntucve
CVE-2012-2892
2012-09-26 00:00:00
nvd
nvd
CVE-2012-2892
2012-09-26 10:56:05
debiancve
debiancve
CVE-2012-2892
2012-09-26 10:56:00
prion
prion
Design/Logic Flaw
2012-09-26 10:56:00
cvelist
cvelist
CVE-2012-2892
2012-09-26 10:00:00
suse
suse
update for chromium (important)
2012-10-22 12:08:44
openvas
openvas
openSUSE: Security Advisory for update (openSUSE-SU-2012:1376-1)
2012-12-13 00:00:00
SuSE Update for update openSUSE-SU-2012:1376-1 (update)
2012-12-13 00:00:00
FreeBSD Ports: chromium
2012-10-03 00:00:00
nessus
nessus
openSUSE Security Update : chromium (openSUSE-SU-2012:1376-1)
2014-06-13 00:00:00
FreeBSD : chromium -- multiple vulnerabilities (5bae2ab4-0820-11e2-be5f-00262d5ed8ee)
2012-09-27 00:00:00
Google Chrome < 22.0.1229.79 Multiple Vulnerabilities
2012-09-26 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2012-09-25 00:00:00
threatpost
threatpost
Google Releases Chrome 22 and Pays Out Nearly $30K in Rewards
2012-09-26 14:16:00
chrome
chrome
Stable Channel Update
2012-09-25 00:00:00
gentoo
gentoo
Chromium: Multiple vulnerabilities
2012-10-21 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
8.7
Confidence
High
EPSS
0.005
Percentile
77.1%
Related for CVE-2012-2892