Lucene search

[email protected]NVD:CVE-2012-2824

HistoryJun 27, 2012 - 10:18 a.m.

CVE-2012-2824

2012-06-2710:18:39

CWE-399

[email protected]

web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

88.8%

JSON

Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG painting.

Affected configurations

NVD

Node

googlechromeRange≤20.0.1132.42

googlechromeMatch20.0.1132.0

googlechromeMatch20.0.1132.1

googlechromeMatch20.0.1132.2

googlechromeMatch20.0.1132.3

googlechromeMatch20.0.1132.4

googlechromeMatch20.0.1132.5

googlechromeMatch20.0.1132.6

googlechromeMatch20.0.1132.7

googlechromeMatch20.0.1132.8

googlechromeMatch20.0.1132.9

googlechromeMatch20.0.1132.10

googlechromeMatch20.0.1132.11

googlechromeMatch20.0.1132.12

googlechromeMatch20.0.1132.13

googlechromeMatch20.0.1132.14

googlechromeMatch20.0.1132.15

googlechromeMatch20.0.1132.16

googlechromeMatch20.0.1132.17

googlechromeMatch20.0.1132.18

googlechromeMatch20.0.1132.19

googlechromeMatch20.0.1132.20

googlechromeMatch20.0.1132.21

googlechromeMatch20.0.1132.22

googlechromeMatch20.0.1132.23

googlechromeMatch20.0.1132.24

googlechromeMatch20.0.1132.25

googlechromeMatch20.0.1132.26

googlechromeMatch20.0.1132.27

googlechromeMatch20.0.1132.28

googlechromeMatch20.0.1132.29

googlechromeMatch20.0.1132.30

googlechromeMatch20.0.1132.31

googlechromeMatch20.0.1132.32

googlechromeMatch20.0.1132.33

googlechromeMatch20.0.1132.34

googlechromeMatch20.0.1132.35

googlechromeMatch20.0.1132.36

googlechromeMatch20.0.1132.37

googlechromeMatch20.0.1132.38

googlechromeMatch20.0.1132.39

googlechromeMatch20.0.1132.40

googlechromeMatch20.0.1132.41

Node

appleiphone_osRange≤6.0.2

appleiphone_osMatch6.0

appleiphone_osMatch6.0.1

References

code.google.com/p/chromium/issues/detail?id=125374

googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html

lists.apple.com/archives/security-announce/2013/Jan/msg00000.html

lists.apple.com/archives/security-announce/2013/Mar/msg00003.html

support.apple.com/kb/HT5642

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15666

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

88.8%

JSON

Related for NVD:CVE-2012-2824

debiancve1 prion1 cvelist1 ubuntucve1 cve1 nessus13 securityvulns5 freebsd1 openvas10 threatpost2 chrome1 gentoo1