CVE-2012-2848: Medium severity Google Chrome vulnerability
Published Aug 6, 2012
·Updated
The drag-and-drop implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows user-assisted remote attackers to bypass intended file access restrictions via a crafted web site.
Affected Software
31 affected components
Google Chrome<=21.0.1180.56
Google Chrome=21.0.1180.0
Google Chrome=21.0.1180.1
Google Chrome=21.0.1180.2
Google Chrome=21.0.1180.31
Google Chrome=21.0.1180.32
Google Chrome=21.0.1180.33
Google Chrome=21.0.1180.34
Google Chrome=21.0.1180.35
Google Chrome=21.0.1180.36
Google Chrome=21.0.1180.37
Google Chrome=21.0.1180.38
Google Chrome=21.0.1180.39
Google Chrome=21.0.1180.41
Google Chrome=21.0.1180.46
Google Chrome=21.0.1180.47
Google Chrome=21.0.1180.48
Google Chrome=21.0.1180.49
Google Chrome=21.0.1180.50
Google Chrome=21.0.1180.51
Google Chrome=21.0.1180.52
Google Chrome=21.0.1180.53
Google Chrome=21.0.1180.54
Google Chrome=21.0.1180.55
Apple iOS and macOS
Linux Linux kernel
Google Chrome<=21.0.1180.59
Google Chrome=21.0.1180.56
Google Chrome=21.0.1180.57
Google Frame
Microsoft Windows
Event History
Aug 6, 2012
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2848?
CVE-2012-2848 has a moderate severity level as it allows potential access bypass under certain conditions.
2
How do I fix CVE-2012-2848?
To fix CVE-2012-2848, update Google Chrome to version 21.0.1180.57 or later.
3
What versions of Google Chrome are affected by CVE-2012-2848?
CVE-2012-2848 affects Google Chrome versions prior to 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows.
4
Can CVE-2012-2848 be exploited without user interaction?
No, CVE-2012-2848 requires user-assisted interaction for exploitation.
5
Is there a workaround for CVE-2012-2848?
There is no known workaround for CVE-2012-2848; updating to the latest Chrome version is recommended.