CVE-2012-2864

Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, allows remote attackers to execute arbitrary code via unspecified vectors that trigger an "array overflow."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
ChromeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
VendorProductVersion
googlechrome_os
21.0.1180.0
googlechrome_os
21.0.1180.1
googlechrome_os
21.0.1180.2
googlechrome_os
21.0.1180.3
googlechrome_os
21.0.1180.4
googlechrome_os
21.0.1180.5
googlechrome_os
21.0.1180.6
googlechrome_os
21.0.1180.7
googlechrome_os
21.0.1180.8
googlechrome_os
21.0.1180.9
googlechrome_os
21.0.1180.10
googlechrome_os
21.0.1180.11
googlechrome_os
21.0.1180.13
googlechrome_os
21.0.1180.14
googlechrome_os
21.0.1180.15
googlechrome_os
21.0.1180.17
googlechrome_os
21.0.1180.18
googlechrome_os
21.0.1180.31
googlechrome_os
21.0.1180.32
googlechrome_os
21.0.1180.33
googlechrome_os
21.0.1180.34
googlechrome_os
21.0.1180.35
googlechrome_os
21.0.1180.36
googlechrome_os
21.0.1180.37
googlechrome_os
21.0.1180.38
googlechrome_os
21.0.1180.39
googlechrome_os
21.0.1180.41
googlechrome_os
21.0.1180.46
googlechrome_os
21.0.1180.47
googlechrome_os
21.0.1180.48
googlechrome_os
21.0.1180.49
googlechrome_os
21.0.1180.50
googlechrome_os
21.0.1180.79
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
mesa
bullseye
20.3.5-1
fixed
squeeze
not-affected
bookworm
22.3.6-1+deb12u1
fixed
trixie
24.2.4-1
fixed
sid
24.2.6-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mesa
quantal
not-affected
precise
Fixed 8.0.4-0ubuntu0.2
released
oneiric
not-affected
natty
not-affected
lucid
not-affected
hardy
ignored