Lucene search

K
nessusTenable800964.PRM
HistoryNov 29, 2012 - 12:00 a.m.

Google Chrome < 23.0.1271.91 Multiple Vulnerabilities

2012-11-2900:00:00
Tenable
www.tenable.com
13

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.05 Low

EPSS

Percentile

92.9%

Versions of Google Chrome earlier than 23.0.1271.91 are potentially affected by the following vulnerabilities :

  • An out-of-bounds read error exists related to β€˜Skia’. (CVE-2012-5130)

  • An unspecified error exists related to chunked encoding that can result in application crashes. (CVE-2012-5132)

  • Use-after-free errors exist related to β€˜SVG’ filters and printing. (CVE-2012-5133, CVE-2012-5135)

  • A buffer underflow error exists related to β€˜libxml’. (CVE-2012-5134)

  • A cast error exists related to input element handling. (CVE-2012-5136)
    Successful exploitation of any of these issues could lead to an application crash or even allow arbitrary code execution, subject to the user’s privileges.

Binary data 800964.prm

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.05 Low

EPSS

Percentile

92.9%