10

CVE-2012-5142

Google Chrome before 23.0.1271.97 does not properly handle history navigation, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Google ≫ Chrome Version <= 23.0.1271.96
Google ≫ Chrome Version23.0.1271.0
Google ≫ Chrome Version23.0.1271.1
Google ≫ Chrome Version23.0.1271.2
Google ≫ Chrome Version23.0.1271.3
Google ≫ Chrome Version23.0.1271.4
Google ≫ Chrome Version23.0.1271.5
Google ≫ Chrome Version23.0.1271.6
Google ≫ Chrome Version23.0.1271.7
Google ≫ Chrome Version23.0.1271.8
Google ≫ Chrome Version23.0.1271.9
Google ≫ Chrome Version23.0.1271.10
Google ≫ Chrome Version23.0.1271.11
Google ≫ Chrome Version23.0.1271.12
Google ≫ Chrome Version23.0.1271.13
Google ≫ Chrome Version23.0.1271.14
Google ≫ Chrome Version23.0.1271.15
Google ≫ Chrome Version23.0.1271.16
Google ≫ Chrome Version23.0.1271.17
Google ≫ Chrome Version23.0.1271.18
Google ≫ Chrome Version23.0.1271.19
Google ≫ Chrome Version23.0.1271.20
Google ≫ Chrome Version23.0.1271.21
Google ≫ Chrome Version23.0.1271.22
Google ≫ Chrome Version23.0.1271.23
Google ≫ Chrome Version23.0.1271.24
Google ≫ Chrome Version23.0.1271.26
Google ≫ Chrome Version23.0.1271.30
Google ≫ Chrome Version23.0.1271.31
Google ≫ Chrome Version23.0.1271.32
Google ≫ Chrome Version23.0.1271.33
Google ≫ Chrome Version23.0.1271.35
Google ≫ Chrome Version23.0.1271.36
Google ≫ Chrome Version23.0.1271.37
Google ≫ Chrome Version23.0.1271.38
Google ≫ Chrome Version23.0.1271.39
Google ≫ Chrome Version23.0.1271.40
Google ≫ Chrome Version23.0.1271.41
Google ≫ Chrome Version23.0.1271.44
Google ≫ Chrome Version23.0.1271.45
Google ≫ Chrome Version23.0.1271.46
Google ≫ Chrome Version23.0.1271.49
Google ≫ Chrome Version23.0.1271.50
Google ≫ Chrome Version23.0.1271.51
Google ≫ Chrome Version23.0.1271.52
Google ≫ Chrome Version23.0.1271.53
Google ≫ Chrome Version23.0.1271.54
Google ≫ Chrome Version23.0.1271.55
Google ≫ Chrome Version23.0.1271.56
Google ≫ Chrome Version23.0.1271.57
Google ≫ Chrome Version23.0.1271.58
Google ≫ Chrome Version23.0.1271.59
Google ≫ Chrome Version23.0.1271.60
Google ≫ Chrome Version23.0.1271.61
Google ≫ Chrome Version23.0.1271.62
Google ≫ Chrome Version23.0.1271.64
Google ≫ Chrome Version23.0.1271.83
Google ≫ Chrome Version23.0.1271.84
Google ≫ Chrome Version23.0.1271.85
Google ≫ Chrome Version23.0.1271.86
Google ≫ Chrome Version23.0.1271.87
Google ≫ Chrome Version23.0.1271.88
Google ≫ Chrome Version23.0.1271.89
Google ≫ Chrome Version23.0.1271.91
Google ≫ Chrome Version23.0.1271.92
Google ≫ Chrome Version23.0.1271.93
Google ≫ Chrome Version23.0.1271.94
Google ≫ Chrome Version23.0.1271.95
Opensuse ≫ Opensuse Version12.1
Opensuse ≫ Opensuse Version12.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.73% 0.842
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://googlechromereleases.blogspot.com/2012/12/stable-channel-update.html
http://lists.opensuse.org/opensuse-updates/2012-12/msg00073.html
https://code.google.com/p/chromium/issues/detail?id=160803
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16173