CVE-2012-2872: XSS
Published Aug 31, 2012
·Updated
Cross-site scripting (XSS) vulnerability in an SSL interstitial page in Google Chrome before 21.0.1180.89 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
54 affected components
openSUSE openSUSE=12.1
openSUSE openSUSE=12.2
Google Chrome<=21.0.1180.88
Google Chrome=21.0.1180.0
Google Chrome=21.0.1180.1
Google Chrome=21.0.1180.2
Google Chrome=21.0.1180.31
Google Chrome=21.0.1180.32
Google Chrome=21.0.1180.33
Google Chrome=21.0.1180.34
Google Chrome=21.0.1180.35
Google Chrome=21.0.1180.36
Google Chrome=21.0.1180.37
Google Chrome=21.0.1180.38
Google Chrome=21.0.1180.39
Google Chrome=21.0.1180.41
Google Chrome=21.0.1180.46
Google Chrome=21.0.1180.47
Google Chrome=21.0.1180.48
Google Chrome=21.0.1180.49
Google Chrome=21.0.1180.50
Google Chrome=21.0.1180.51
Google Chrome=21.0.1180.52
Google Chrome=21.0.1180.53
Google Chrome=21.0.1180.54
Google Chrome=21.0.1180.55
Google Chrome=21.0.1180.56
Google Chrome=21.0.1180.57
Google Chrome=21.0.1180.59
Google Chrome=21.0.1180.60
Google Chrome=21.0.1180.61
Google Chrome=21.0.1180.62
Google Chrome=21.0.1180.63
Google Chrome=21.0.1180.64
Google Chrome=21.0.1180.68
Google Chrome=21.0.1180.69
Google Chrome=21.0.1180.70
Google Chrome=21.0.1180.71
Google Chrome=21.0.1180.72
Google Chrome=21.0.1180.73
Google Chrome=21.0.1180.74
Google Chrome=21.0.1180.75
Google Chrome=21.0.1180.76
Google Chrome=21.0.1180.77
Google Chrome=21.0.1180.78
Google Chrome=21.0.1180.79
Google Chrome=21.0.1180.80
Google Chrome=21.0.1180.81
Google Chrome=21.0.1180.82
Google Chrome=21.0.1180.83
Google Chrome=21.0.1180.84
Google Chrome=21.0.1180.85
Google Chrome=21.0.1180.86
Google Chrome=21.0.1180.87
Remediation
Patch Available
Event History
Aug 31, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2872?
The severity of CVE-2012-2872 is reported as high due to its potential for remote exploitation via cross-site scripting.
2
How do I fix CVE-2012-2872?
To fix CVE-2012-2872, upgrade Google Chrome to version 21.0.1180.89 or later.
3
Which versions of Google Chrome are affected by CVE-2012-2872?
Versions of Google Chrome before 21.0.1180.89 are affected by CVE-2012-2872.
4
What type of vulnerability is CVE-2012-2872?
CVE-2012-2872 is a cross-site scripting (XSS) vulnerability.
5
What consequences can arise from CVE-2012-2872?
Consequences of CVE-2012-2872 include the potential for remote attackers to inject malicious web scripts or HTML into user sessions.