CVEvulnerability

CVE-2012-2897

7.8 HIGH Published 2012-09-26 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-09-26
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as used by Google Chrome before 22.0.1229.79 and other programs, do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted TrueType font file, aka "Windows Font Parsing Vulnerability" or "TrueType Font Parsing Vulnerability."

Affected configurations

• google chrome (<= 22.0.1229.78) • google chrome 22.0.1229.0 • google chrome 22.0.1229.1 • google chrome 22.0.1229.2 • google chrome 22.0.1229.3 • google chrome 22.0.1229.4 • google chrome 22.0.1229.6 • google chrome 22.0.1229.7 • google chrome 22.0.1229.8 • google chrome 22.0.1229.9 • google chrome 22.0.1229.10 • google chrome 22.0.1229.11 • google chrome 22.0.1229.12 • google chrome 22.0.1229.14 • google chrome 22.0.1229.16 • google chrome 22.0.1229.17 • google chrome 22.0.1229.18 • google chrome 22.0.1229.20 • google chrome 22.0.1229.21 • google chrome 22.0.1229.22 • google chrome 22.0.1229.23 • google chrome 22.0.1229.24 • google chrome 22.0.1229.25 • google chrome 22.0.1229.26 • google chrome 22.0.1229.27 • google chrome 22.0.1229.28 • google chrome 22.0.1229.29 • google chrome 22.0.1229.31 • google chrome 22.0.1229.32 • google chrome 22.0.1229.33 • google chrome 22.0.1229.35 • google chrome 22.0.1229.36 • google chrome 22.0.1229.37 • google chrome 22.0.1229.39 • google chrome 22.0.1229.48 • google chrome 22.0.1229.49 • google chrome 22.0.1229.50 • google chrome 22.0.1229.51 • google chrome 22.0.1229.52 • google chrome 22.0.1229.53 • google chrome 22.0.1229.54 • google chrome 22.0.1229.55 • google chrome 22.0.1229.56 • google chrome 22.0.1229.57 • google chrome 22.0.1229.58 • google chrome 22.0.1229.59 • google chrome 22.0.1229.60 • google chrome 22.0.1229.62 • google chrome 22.0.1229.63 • google chrome 22.0.1229.64 • google chrome 22.0.1229.65 • google chrome 22.0.1229.67 • google chrome 22.0.1229.76 • microsoft windows 7 • microsoft windows 8 • microsoft windows rt • microsoft windows server 2003 • microsoft windows server 2008 • microsoft windows server 2012 • microsoft windows vista … and 1 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References