CVE-2012-2852: Use After Free
The PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not properly handle object linkage, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted document.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2852?
CVE-2012-2852 has been classified as a high severity vulnerability due to its potential to allow denial of service attacks.
How do I fix CVE-2012-2852?
To fix CVE-2012-2852, upgrade Google Chrome to version 21.0.1180.57 or later on all affected operating systems.
Which versions of Google Chrome are affected by CVE-2012-2852?
CVE-2012-2852 affects Google Chrome versions prior to 21.0.1180.57 on Mac OS X and Linux, and on Windows versions prior to 21.0.1180.60.
What type of attack does CVE-2012-2852 facilitate?
CVE-2012-2852 can facilitate remote denial of service attacks through improper object linkage handling.
Is there a patch available for CVE-2012-2852?
Yes, Google has released a patch for CVE-2012-2852 in the updates for Chrome version 21.0.1180.57 and later.