PT-2012-4289 · Google · Google Chrome

Published 2012-06-26 · Updated 2017-09-19 · CVE-2012-2828

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 20.0.1132.43

Description The issue is related to multiple integer overflows in the PDF functionality. This could allow remote attackers to cause a denial of service or possibly have other unspecified impacts via a crafted document.

Recommendations For versions prior to 20.0.1132.43, update to version 20.0.1132.43 or later to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2012-2828

Affected Products

Google Chrome

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2012-2828 · Security Note
• http://code.google.com/p/chromium/issues/detail?id=129857 · Note
• https://chromereleases.googleblog.com/2012/06/stable-channel-update_26.html · Note
• https://crbug.com/129857 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15287 · Note
• http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html · Note