CVE-2012-2868: Race Condition
Published Aug 31, 2012
·Updated
Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving improper interaction between worker processes and an XMLHttpRequest (aka XHR) object.
Affected Software
54 affected components
openSUSE openSUSE=12.1
openSUSE openSUSE=12.2
Google Chrome<=21.0.1180.88
Google Chrome=21.0.1180.0
Google Chrome=21.0.1180.1
Google Chrome=21.0.1180.2
Google Chrome=21.0.1180.31
Google Chrome=21.0.1180.32
Google Chrome=21.0.1180.33
Google Chrome=21.0.1180.34
Google Chrome=21.0.1180.35
Google Chrome=21.0.1180.36
Google Chrome=21.0.1180.37
Google Chrome=21.0.1180.38
Google Chrome=21.0.1180.39
Google Chrome=21.0.1180.41
Google Chrome=21.0.1180.46
Google Chrome=21.0.1180.47
Google Chrome=21.0.1180.48
Google Chrome=21.0.1180.49
Google Chrome=21.0.1180.50
Google Chrome=21.0.1180.51
Google Chrome=21.0.1180.52
Google Chrome=21.0.1180.53
Google Chrome=21.0.1180.54
Google Chrome=21.0.1180.55
Google Chrome=21.0.1180.56
Google Chrome=21.0.1180.57
Google Chrome=21.0.1180.59
Google Chrome=21.0.1180.60
Google Chrome=21.0.1180.61
Google Chrome=21.0.1180.62
Google Chrome=21.0.1180.63
Google Chrome=21.0.1180.64
Google Chrome=21.0.1180.68
Google Chrome=21.0.1180.69
Google Chrome=21.0.1180.70
Google Chrome=21.0.1180.71
Google Chrome=21.0.1180.72
Google Chrome=21.0.1180.73
Google Chrome=21.0.1180.74
Google Chrome=21.0.1180.75
Google Chrome=21.0.1180.76
Google Chrome=21.0.1180.77
Google Chrome=21.0.1180.78
Google Chrome=21.0.1180.79
Google Chrome=21.0.1180.80
Google Chrome=21.0.1180.81
Google Chrome=21.0.1180.82
Google Chrome=21.0.1180.83
Google Chrome=21.0.1180.84
Google Chrome=21.0.1180.85
Google Chrome=21.0.1180.86
Google Chrome=21.0.1180.87
Remediation
Patch Available
Event History
Aug 31, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2868?
CVE-2012-2868 has been classified as a high severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2012-2868?
To mitigate CVE-2012-2868, upgrade Google Chrome to version 21.0.1180.89 or later.
3
What does CVE-2012-2868 exploit?
CVE-2012-2868 exploits a race condition involving worker processes and XMLHttpRequest objects.
4
What versions of Google Chrome are affected by CVE-2012-2868?
CVE-2012-2868 affects Google Chrome versions before 21.0.1180.89.
5
Is CVE-2012-2868 present in OpenSUSE?
Yes, CVE-2012-2868 can affect OpenSUSE versions 12.1 and 12.2 when using vulnerable versions of Google Chrome.