CVE-2012-2877: Input Validation
Published Sep 26, 2012
·Updated
The extension system in Google Chrome before 22.0.1229.79 does not properly handle modal dialogs, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
Affected Software
55 affected components
Google Chrome<=22.0.1229.78
Google Chrome=22.0.1229.0
Google Chrome=22.0.1229.1
Google Chrome=22.0.1229.2
Google Chrome=22.0.1229.3
Google Chrome=22.0.1229.4
Google Chrome=22.0.1229.6
Google Chrome=22.0.1229.7
Google Chrome=22.0.1229.8
Google Chrome=22.0.1229.9
Google Chrome=22.0.1229.10
Google Chrome=22.0.1229.11
Google Chrome=22.0.1229.12
Google Chrome=22.0.1229.14
Google Chrome=22.0.1229.16
Google Chrome=22.0.1229.17
Google Chrome=22.0.1229.18
Google Chrome=22.0.1229.20
Google Chrome=22.0.1229.21
Google Chrome=22.0.1229.22
Google Chrome=22.0.1229.23
Google Chrome=22.0.1229.24
Google Chrome=22.0.1229.25
Google Chrome=22.0.1229.26
Google Chrome=22.0.1229.27
Google Chrome=22.0.1229.28
Google Chrome=22.0.1229.29
Google Chrome=22.0.1229.31
Google Chrome=22.0.1229.32
Google Chrome=22.0.1229.33
Google Chrome=22.0.1229.35
Google Chrome=22.0.1229.36
Google Chrome=22.0.1229.37
Google Chrome=22.0.1229.39
Google Chrome=22.0.1229.48
Google Chrome=22.0.1229.49
Google Chrome=22.0.1229.50
Google Chrome=22.0.1229.51
Google Chrome=22.0.1229.52
Google Chrome=22.0.1229.53
Google Chrome=22.0.1229.54
Google Chrome=22.0.1229.55
Google Chrome=22.0.1229.56
Google Chrome=22.0.1229.57
Google Chrome=22.0.1229.58
Google Chrome=22.0.1229.59
Google Chrome=22.0.1229.60
Google Chrome=22.0.1229.62
Google Chrome=22.0.1229.63
Google Chrome=22.0.1229.64
Google Chrome=22.0.1229.65
Google Chrome=22.0.1229.67
Google Chrome=22.0.1229.76
openSUSE openSUSE=12.1
openSUSE openSUSE=12.2
Remediation
Patch Available
Event History
Sep 26, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2877?
CVE-2012-2877 has a high severity as it allows attackers to crash the application, causing a denial of service.
2
How do I fix CVE-2012-2877?
The CVE-2012-2877 vulnerability can be fixed by upgrading Google Chrome to version 22.0.1229.79 or later.
3
What types of vulnerabilities does CVE-2012-2877 include?
CVE-2012-2877 includes issues with the improper handling of modal dialogs in Google Chrome.
4
Which versions of Google Chrome are affected by CVE-2012-2877?
CVE-2012-2877 affects Google Chrome versions prior to 22.0.1229.79.
5
Can CVE-2012-2877 be exploited remotely?
Yes, CVE-2012-2877 can be exploited remotely through unspecified vectors to cause a denial of service.