Lucene search
HistoryAug 22, 2012 - 10:42 a.m.
CVE-2012-2864
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.3
Confidence
Low
EPSS
0.054
Percentile
93.2%
Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, allows remote attackers to execute arbitrary code via unspecified vectors that trigger an βarray overflow.β
Affected configurations
Node
googlechrome_osRangeβ€21.0.1180.81
ORgooglechrome_osMatch21.0.1180.0
ORgooglechrome_osMatch21.0.1180.1
ORgooglechrome_osMatch21.0.1180.2
ORgooglechrome_osMatch21.0.1180.3
ORgooglechrome_osMatch21.0.1180.4
ORgooglechrome_osMatch21.0.1180.5
ORgooglechrome_osMatch21.0.1180.6
ORgooglechrome_osMatch21.0.1180.7
ORgooglechrome_osMatch21.0.1180.8
ORgooglechrome_osMatch21.0.1180.9
ORgooglechrome_osMatch21.0.1180.10
ORgooglechrome_osMatch21.0.1180.11
ORgooglechrome_osMatch21.0.1180.13
ORgooglechrome_osMatch21.0.1180.14
ORgooglechrome_osMatch21.0.1180.15
ORgooglechrome_osMatch21.0.1180.17
ORgooglechrome_osMatch21.0.1180.18
ORgooglechrome_osMatch21.0.1180.31
ORgooglechrome_osMatch21.0.1180.32
ORgooglechrome_osMatch21.0.1180.33
ORgooglechrome_osMatch21.0.1180.34
ORgooglechrome_osMatch21.0.1180.35
ORgooglechrome_osMatch21.0.1180.36
ORgooglechrome_osMatch21.0.1180.37
ORgooglechrome_osMatch21.0.1180.38
ORgooglechrome_osMatch21.0.1180.39
ORgooglechrome_osMatch21.0.1180.41
ORgooglechrome_osMatch21.0.1180.46
ORgooglechrome_osMatch21.0.1180.47
ORgooglechrome_osMatch21.0.1180.48
ORgooglechrome_osMatch21.0.1180.49
ORgooglechrome_osMatch21.0.1180.50
ORgooglechrome_osMatch21.0.1180.79
acerac700_chromebookMatch-
ORgooglecr-48_chromebookMatch-
ORsamsungseries_5_550_chromebookMatch-
ORsamsungseries_5_chromebookMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| chrome_os | * | cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:* | |
| chrome_os | 21.0.1180.0 | cpe:2.3:o:google:chrome_os:21.0.1180.0:*:*:*:*:*:*:* | |
| chrome_os | 21.0.1180.1 | cpe:2.3:o:google:chrome_os:21.0.1180.1:*:*:*:*:*:*:* | |
| chrome_os | 21.0.1180.2 | cpe:2.3:o:google:chrome_os:21.0.1180.2:*:*:*:*:*:*:* | |
| chrome_os | 21.0.1180.3 | cpe:2.3:o:google:chrome_os:21.0.1180.3:*:*:*:*:*:*:* | |
| chrome_os | 21.0.1180.4 | cpe:2.3:o:google:chrome_os:21.0.1180.4:*:*:*:*:*:*:* | |
| chrome_os | 21.0.1180.5 | cpe:2.3:o:google:chrome_os:21.0.1180.5:*:*:*:*:*:*:* | |
| chrome_os | 21.0.1180.6 | cpe:2.3:o:google:chrome_os:21.0.1180.6:*:*:*:*:*:*:* | |
| chrome_os | 21.0.1180.7 | cpe:2.3:o:google:chrome_os:21.0.1180.7:*:*:*:*:*:*:* | |
| chrome_os | 21.0.1180.8 | cpe:2.3:o:google:chrome_os:21.0.1180.8:*:*:*:*:*:*:* |
References
Related
securityvulns
securityvulns
Mesa code execution
2012-11-06 00:00:00
[USN-1623-1] Mesa vulnerability
2012-11-06 00:00:00
openvas
openvas
Ubuntu Update for mesa USN-1623-1
2012-11-06 00:00:00
Ubuntu: Security Advisory (USN-1623-1)
2012-11-06 00:00:00
Gentoo Security Advisory GLSA 201404-06
2015-09-29 00:00:00
debiancve
debiancve
CVE-2012-2864
2012-08-22 10:42:04
nessus
nessus
Ubuntu 12.04 LTS : mesa vulnerability (USN-1623-1)
2012-11-06 00:00:00
Mandriva Linux Security Advisory : mesa (MDVSA-2013:103)
2013-04-20 00:00:00
openSUSE Security Update : Mesa (openSUSE-SU-2012:1120-1)
2014-06-13 00:00:00
cve
cve
CVE-2012-2864
2012-08-22 10:42:04
prion
prion
Buffer overflow
2012-08-22 10:42:00
ubuntu
ubuntu
Mesa vulnerability
2012-11-05 00:00:00
cvelist
cvelist
CVE-2012-2864
2012-08-22 10:00:00
chrome
chrome
Stable Channel Update for Chrome OS
2012-08-21 00:00:00
ubuntucve
ubuntucve
CVE-2012-2864
2012-08-22 00:00:00
seebug
seebug
Google Chrome OS θΏη¨δ»£η ζ§θ‘ζΌζ΄
2012-08-23 00:00:00
gentoo
gentoo
Mesa: Multiple vulnerabilities
2014-04-08 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.3
Confidence
Low
EPSS
0.054
Percentile
93.2%
Related for NVD:CVE-2012-2864