CVE-2012-2854: Infoleak
Published Aug 6, 2012
·Updated
Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to obtain potentially sensitive information about pointer values by leveraging access to a WebUI renderer process.
Affected Software
31 affected components
Google Chrome<=21.0.1180.56
Google Chrome=21.0.1180.0
Google Chrome=21.0.1180.1
Google Chrome=21.0.1180.2
Google Chrome=21.0.1180.31
Google Chrome=21.0.1180.32
Google Chrome=21.0.1180.33
Google Chrome=21.0.1180.34
Google Chrome=21.0.1180.35
Google Chrome=21.0.1180.36
Google Chrome=21.0.1180.37
Google Chrome=21.0.1180.38
Google Chrome=21.0.1180.39
Google Chrome=21.0.1180.41
Google Chrome=21.0.1180.46
Google Chrome=21.0.1180.47
Google Chrome=21.0.1180.48
Google Chrome=21.0.1180.49
Google Chrome=21.0.1180.50
Google Chrome=21.0.1180.51
Google Chrome=21.0.1180.52
Google Chrome=21.0.1180.53
Google Chrome=21.0.1180.54
Google Chrome=21.0.1180.55
Apple iOS and macOS
Linux Linux kernel
Google Chrome<=21.0.1180.59
Google Chrome=21.0.1180.56
Google Chrome=21.0.1180.57
Google Frame
Microsoft Windows
Event History
Aug 6, 2012
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2854?
CVE-2012-2854 has been classified with a medium severity level, indicating potential security risks.
2
How do I fix CVE-2012-2854?
To mitigate CVE-2012-2854, it is recommended to update Google Chrome to version 21.0.1180.57 or later.
3
Which versions of Google Chrome are affected by CVE-2012-2854?
CVE-2012-2854 affects Google Chrome versions prior to 21.0.1180.57.
4
What does CVE-2012-2854 exploit?
CVE-2012-2854 exploits a vulnerability that allows remote attackers to obtain potentially sensitive information about pointer values.
5
Is CVE-2012-2854 specific to any operating system?
CVE-2012-2854 affects Google Chrome on Mac OS X, Linux, and Windows platforms.