PT-2012-5775 · Google · Google Chrome

Attekett · Published 2012-10-08 · Updated 2017-09-19 · CVE-2012-5108

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 22.0.1229.92

Description A race condition issue allows remote attackers to execute arbitrary code via vectors related to audio devices.

Recommendations For versions prior to 22.0.1229.92, update to version 22.0.1229.92 or later to resolve the issue.

Fix

RCE

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2012-5108

Affected Products

Google Chrome

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2012-5108 · Security Note
• https://chromereleases.googleblog.com/2012/10/stable-channel-update.html · Note
• https://crbug.com/147499 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15651 · Note
• http://googlechromereleases.blogspot.com/2012/10/stable-channel-update.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79064 · Note
• https://code.google.com/p/chromium/issues/detail?id=147499 · Note