CVE-2012-2887: Use After Free
Published Sep 26, 2012
·Updated
Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving onclick events.
Affected Software
55 affected components
Google Chrome<=22.0.1229.78
Google Chrome=22.0.1229.0
Google Chrome=22.0.1229.1
Google Chrome=22.0.1229.2
Google Chrome=22.0.1229.3
Google Chrome=22.0.1229.4
Google Chrome=22.0.1229.6
Google Chrome=22.0.1229.7
Google Chrome=22.0.1229.8
Google Chrome=22.0.1229.9
Google Chrome=22.0.1229.10
Google Chrome=22.0.1229.11
Google Chrome=22.0.1229.12
Google Chrome=22.0.1229.14
Google Chrome=22.0.1229.16
Google Chrome=22.0.1229.17
Google Chrome=22.0.1229.18
Google Chrome=22.0.1229.20
Google Chrome=22.0.1229.21
Google Chrome=22.0.1229.22
Google Chrome=22.0.1229.23
Google Chrome=22.0.1229.24
Google Chrome=22.0.1229.25
Google Chrome=22.0.1229.26
Google Chrome=22.0.1229.27
Google Chrome=22.0.1229.28
Google Chrome=22.0.1229.29
Google Chrome=22.0.1229.31
Google Chrome=22.0.1229.32
Google Chrome=22.0.1229.33
Google Chrome=22.0.1229.35
Google Chrome=22.0.1229.36
Google Chrome=22.0.1229.37
Google Chrome=22.0.1229.39
Google Chrome=22.0.1229.48
Google Chrome=22.0.1229.49
Google Chrome=22.0.1229.50
Google Chrome=22.0.1229.51
Google Chrome=22.0.1229.52
Google Chrome=22.0.1229.53
Google Chrome=22.0.1229.54
Google Chrome=22.0.1229.55
Google Chrome=22.0.1229.56
Google Chrome=22.0.1229.57
Google Chrome=22.0.1229.58
Google Chrome=22.0.1229.59
Google Chrome=22.0.1229.60
Google Chrome=22.0.1229.62
Google Chrome=22.0.1229.63
Google Chrome=22.0.1229.64
Google Chrome=22.0.1229.65
Google Chrome=22.0.1229.67
Google Chrome=22.0.1229.76
openSUSE openSUSE=12.1
openSUSE openSUSE=12.2
Remediation
Patch Available
Event History
Sep 26, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2887?
CVE-2012-2887 is classified as a denial of service vulnerability that may also lead to unspecified impacts due to exploitability.
2
How do I fix CVE-2012-2887?
To fix CVE-2012-2887, update Google Chrome to the latest version above 22.0.1229.79.
3
What versions of Google Chrome are affected by CVE-2012-2887?
CVE-2012-2887 affects Google Chrome versions prior to 22.0.1229.79, including all versions listed prior to this patch.
4
Can CVE-2012-2887 be exploited remotely?
Yes, CVE-2012-2887 can be exploited remotely via specially crafted onclick events.
5
What impact can exploitations of CVE-2012-2887 have on users?
Exploitations of CVE-2012-2887 can lead to denial of service, which may disrupt user access to Google Chrome.