PT-2012-4316 · Google · Google Chrome+1

Miaubiz · Publicado 2012-08-22 · Atualizado 2014-02-12 · CVE-2012-2864

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mesa versions prior to the version used in Google Chrome 21.0.1183.0

Description The issue allows remote attackers to execute arbitrary code via unspecified vectors that trigger an "array overflow." This affects the Mesa software used in specific Chromebook platforms.

Recommendations For versions prior to the one used in Google Chrome 21.0.1183.0, update to Google Chrome 21.0.1183.0 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-2864

Produtos afetados

Google Chrome

Mesa

Referências · 10

• https://osv.dev/vulnerability/CVE-2012-2864 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDVSA-2013:103 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2012-2864 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-2864 · Nota de Segurança
• http://code.google.com/p/chromium/issues/detail?id=141901 · Nota
• http://googlechromereleases.blogspot.com/2012/08/stable-channel-update-for-chrome-os.html · Nota
• http://ubuntu.com/usn/USN-1623-1 · Aviso do Fabricante
• http://secunia.com/advisories/51215 · Nota
• https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0264 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-2864 · Aviso do Fabricante