CVEvulnerability
CVE-2012-5117
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-11-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Google Chrome before 23.0.1271.64 does not properly restrict the loading of an SVG subresource in the context of an IMG element, which has unspecified impact and remote attack vectors.
Affected configurations
• google chrome (<= 23.0.1271.62)
• google chrome 23.0.1271.0
• google chrome 23.0.1271.1
• google chrome 23.0.1271.2
• google chrome 23.0.1271.3
• google chrome 23.0.1271.4
• google chrome 23.0.1271.5
• google chrome 23.0.1271.6
• google chrome 23.0.1271.7
• google chrome 23.0.1271.8
• google chrome 23.0.1271.9
• google chrome 23.0.1271.10
• google chrome 23.0.1271.11
• google chrome 23.0.1271.12
• google chrome 23.0.1271.13
• google chrome 23.0.1271.14
• google chrome 23.0.1271.15
• google chrome 23.0.1271.16
• google chrome 23.0.1271.17
• google chrome 23.0.1271.18
• google chrome 23.0.1271.19
• google chrome 23.0.1271.20
• google chrome 23.0.1271.21
• google chrome 23.0.1271.22
• google chrome 23.0.1271.23
• google chrome 23.0.1271.24
• google chrome 23.0.1271.26
• google chrome 23.0.1271.30
• google chrome 23.0.1271.31
• google chrome 23.0.1271.32
• google chrome 23.0.1271.33
• google chrome 23.0.1271.35
• google chrome 23.0.1271.36
• google chrome 23.0.1271.37
• google chrome 23.0.1271.38
• google chrome 23.0.1271.39
• google chrome 23.0.1271.40
• google chrome 23.0.1271.41
• google chrome 23.0.1271.44
• google chrome 23.0.1271.45
• google chrome 23.0.1271.46
• google chrome 23.0.1271.49
• google chrome 23.0.1271.50
• google chrome 23.0.1271.51
• google chrome 23.0.1271.52
• google chrome 23.0.1271.53
• google chrome 23.0.1271.54
• google chrome 23.0.1271.55
• google chrome 23.0.1271.56
• google chrome 23.0.1271.57
• google chrome 23.0.1271.58
• google chrome 23.0.1271.59
• google chrome 23.0.1271.60
• google chrome 23.0.1271.61
Related
Weakness · not in database (1)
References
- http://googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html googlechromereleases.blogspot.com
- http://osvdb.org/87076 osvdb.org
- http://www.securityfocus.com/bid/56413 www.securityfocus.com
- https://code.google.com/p/chromium/issues/detail?id=145915 code.google.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15912 oval.cisecurity.org
- http://googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html googlechromereleases.blogspot.com
- http://osvdb.org/87076 osvdb.org
- http://www.securityfocus.com/bid/56413 www.securityfocus.com
- https://code.google.com/p/chromium/issues/detail?id=145915 code.google.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15912 oval.cisecurity.org