PT-2012-4316 · Google · Google Chrome+1

Miaubiz · Published 2012-08-22 · Updated 2014-02-12 · CVE-2012-2864

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mesa versions prior to the version used in Google Chrome 21.0.1183.0

Description The issue allows remote attackers to execute arbitrary code via unspecified vectors that trigger an "array overflow." This affects the Mesa software used in specific Chromebook platforms.

Recommendations For versions prior to the one used in Google Chrome 21.0.1183.0, update to Google Chrome 21.0.1183.0 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-2864

Affected Products

Google Chrome

Mesa

References · 10

• https://osv.dev/vulnerability/CVE-2012-2864 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2013:103 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-2864 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-2864 · Security Note
• http://ubuntu.com/usn/USN-1623-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-2864 · Vendor Advisory
• http://code.google.com/p/chromium/issues/detail?id=141901 · Note
• http://googlechromereleases.blogspot.com/2012/08/stable-channel-update-for-chrome-os.html · Note
• http://secunia.com/advisories/51215 · Note
• https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0264 · Note