Google Chrome before 23.0.1271.64 does not properly restrict the loading of an SVG subresource in the context of an IMG element, which has unspecified impact and remote attack vectors.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:44
Type | Values Removed | Values Added |
---|---|---|
References | () http://googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html - | |
References | () http://osvdb.org/87076 - | |
References | () http://www.securityfocus.com/bid/56413 - | |
References | () https://code.google.com/p/chromium/issues/detail?id=145915 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15912 - |
07 Nov 2023, 02:12
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.securityfocus.com/bid/56413 - | |
References | () http://googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html - | |
References | () http://osvdb.org/87076 - | |
References | () https://code.google.com/p/chromium/issues/detail?id=145915 - |
Information
Published : 2012-11-07 11:43
Updated : 2024-11-21 01:44
NVD link : CVE-2012-5117
Mitre link : CVE-2012-5117
CVE.ORG link : CVE-2012-5117
JSON object : View
Products Affected
- chrome
CWE
CWE-264
Permissions, Privileges, and Access Controls