CVE-2012-5117

Google Chrome before 23.0.1271.64 does not properly restrict the loading of an SVG subresource in the context of an IMG element, which has unspecified impact and remote attack vectors.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.0:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.1:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.2:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.3:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.4:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.5:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.6:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.7:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.8:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.9:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.10:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.11:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.12:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.13:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.14:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.15:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.16:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.17:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.18:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.19:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.20:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.21:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.22:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.23:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.24:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.26:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.30:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.31:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.32:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.33:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.35:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.36:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.37:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.38:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.39:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.40:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.41:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.44:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.45:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.46:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.49:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.50:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.51:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.52:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.53:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.54:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.55:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.56:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.57:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.58:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.59:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.60:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:23.0.1271.61:*:*:*:*:*:*:*

History

21 Nov 2024, 01:44

Type Values Removed Values Added
References () http://googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html - () http://googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html -
References () http://osvdb.org/87076 - () http://osvdb.org/87076 -
References () http://www.securityfocus.com/bid/56413 - () http://www.securityfocus.com/bid/56413 -
References () https://code.google.com/p/chromium/issues/detail?id=145915 - () https://code.google.com/p/chromium/issues/detail?id=145915 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15912 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15912 -

07 Nov 2023, 02:12

Type Values Removed Values Added
References (BID) http://www.securityfocus.com/bid/56413 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/56413 -
References (CONFIRM) http://googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html - Vendor Advisory () http://googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html -
References (OSVDB) http://osvdb.org/87076 - Broken Link () http://osvdb.org/87076 -
References (CONFIRM) https://code.google.com/p/chromium/issues/detail?id=145915 - Patch, Issue Tracking () https://code.google.com/p/chromium/issues/detail?id=145915 -

Information

Published : 2012-11-07 11:43

Updated : 2024-11-21 01:44


NVD link : CVE-2012-5117

Mitre link : CVE-2012-5117

CVE.ORG link : CVE-2012-5117


JSON object : View

Products Affected

google

  • chrome
CWE
CWE-264

Permissions, Privileges, and Access Controls