CVE-2012-5129

Heap-based buffer overflow in the WebGL subsystem in Google Chrome OS before 23.0.1271.94 allows remote attackers to cause a denial of service (GPU process crash) or possibly have unspecified other impact via unknown vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
ChromeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
VendorProductVersion
googlechrome
23.0.1271.91
googlechrome
23.0.1271.92
googlechrome_os
𝑥
≤ 21.0.1180.57
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
mesa
bullseye
20.3.5-1
fixed
squeeze
not-affected
bookworm
22.3.6-1+deb12u1
fixed
sid
24.2.4-1
fixed
trixie
24.2.4-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mesa
raring
not-affected
quantal
not-affected
precise
Fixed 8.0.4-0ubuntu0.5
released
oneiric
not-affected
lucid
not-affected
hardy
ignored
mesa-lts-quantal
raring
dne
quantal
dne
precise
not-affected
oneiric
dne
lucid
dne
hardy
dne
Common Weakness Enumeration
References
http://googlechromereleases.blogspot.com/2012/11/stable-update-for-chrome-os_30.html
http://www.ubuntu.com/usn/USN-1818-1
https://code.google.com/p/chromium/issues/detail?id=145525
http://googlechromereleases.blogspot.com/2012/11/stable-update-for-chrome-os_30.html
http://www.ubuntu.com/usn/USN-1818-1
https://code.google.com/p/chromium/issues/detail?id=145525