5

CVE-2012-5130

Skia, as used in Google Chrome before 23.0.1271.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Opensuse ≫ Opensuse Version 12.1
Opensuse ≫ Opensuse Version 12.2
Google ≫ Chrome Version <= 23.0.1271.89
Google ≫ Chrome Version 23.0.1271.0
Google ≫ Chrome Version 23.0.1271.1
Google ≫ Chrome Version 23.0.1271.2
Google ≫ Chrome Version 23.0.1271.3
Google ≫ Chrome Version 23.0.1271.4
Google ≫ Chrome Version 23.0.1271.5
Google ≫ Chrome Version 23.0.1271.6
Google ≫ Chrome Version 23.0.1271.7
Google ≫ Chrome Version 23.0.1271.8
Google ≫ Chrome Version 23.0.1271.9
Google ≫ Chrome Version 23.0.1271.10
Google ≫ Chrome Version 23.0.1271.11
Google ≫ Chrome Version 23.0.1271.12
Google ≫ Chrome Version 23.0.1271.13
Google ≫ Chrome Version 23.0.1271.14
Google ≫ Chrome Version 23.0.1271.15
Google ≫ Chrome Version 23.0.1271.16
Google ≫ Chrome Version 23.0.1271.17
Google ≫ Chrome Version 23.0.1271.18
Google ≫ Chrome Version 23.0.1271.19
Google ≫ Chrome Version 23.0.1271.20
Google ≫ Chrome Version 23.0.1271.21
Google ≫ Chrome Version 23.0.1271.22
Google ≫ Chrome Version 23.0.1271.23
Google ≫ Chrome Version 23.0.1271.24
Google ≫ Chrome Version 23.0.1271.26
Google ≫ Chrome Version 23.0.1271.30
Google ≫ Chrome Version 23.0.1271.31
Google ≫ Chrome Version 23.0.1271.32
Google ≫ Chrome Version 23.0.1271.33
Google ≫ Chrome Version 23.0.1271.35
Google ≫ Chrome Version 23.0.1271.36
Google ≫ Chrome Version 23.0.1271.37
Google ≫ Chrome Version 23.0.1271.38
Google ≫ Chrome Version 23.0.1271.39
Google ≫ Chrome Version 23.0.1271.40
Google ≫ Chrome Version 23.0.1271.41
Google ≫ Chrome Version 23.0.1271.44
Google ≫ Chrome Version 23.0.1271.45
Google ≫ Chrome Version 23.0.1271.46
Google ≫ Chrome Version 23.0.1271.49
Google ≫ Chrome Version 23.0.1271.50
Google ≫ Chrome Version 23.0.1271.51
Google ≫ Chrome Version 23.0.1271.52
Google ≫ Chrome Version 23.0.1271.53
Google ≫ Chrome Version 23.0.1271.54
Google ≫ Chrome Version 23.0.1271.55
Google ≫ Chrome Version 23.0.1271.56
Google ≫ Chrome Version 23.0.1271.57
Google ≫ Chrome Version 23.0.1271.58
Google ≫ Chrome Version 23.0.1271.59
Google ≫ Chrome Version 23.0.1271.60
Google ≫ Chrome Version 23.0.1271.61
Google ≫ Chrome Version 23.0.1271.62
Google ≫ Chrome Version 23.0.1271.64
Google ≫ Chrome Version 23.0.1271.83
Google ≫ Chrome Version 23.0.1271.84
Google ≫ Chrome Version 23.0.1271.85
Google ≫ Chrome Version 23.0.1271.86
Google ≫ Chrome Version 23.0.1271.87
Google ≫ Chrome Version 23.0.1271.88
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.46% 0.79
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

http://googlechromereleases.blogspot.com/2012/11/stable-channel-update.html
http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html
http://osvdb.org/87888
http://www.securityfocus.com/bid/56684
http://www.securitytracker.com/id?1027815
https://code.google.com/p/chromium/issues/detail?id=148638
https://exchange.xforce.ibmcloud.com/vulnerabilities/80292
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15734