CVE-2012-5136: Input Validation
Published Nov 28, 2012
·Updated
Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted HTML document.
Affected Software
64 affected components
Google Chrome<=23.0.1271.89
Google Chrome=23.0.1271.0
Google Chrome=23.0.1271.1
Google Chrome=23.0.1271.2
Google Chrome=23.0.1271.3
Google Chrome=23.0.1271.4
Google Chrome=23.0.1271.5
Google Chrome=23.0.1271.6
Google Chrome=23.0.1271.7
Google Chrome=23.0.1271.8
Google Chrome=23.0.1271.9
Google Chrome=23.0.1271.10
Google Chrome=23.0.1271.11
Google Chrome=23.0.1271.12
Google Chrome=23.0.1271.13
Google Chrome=23.0.1271.14
Google Chrome=23.0.1271.15
Google Chrome=23.0.1271.16
Google Chrome=23.0.1271.17
Google Chrome=23.0.1271.18
Google Chrome=23.0.1271.19
Google Chrome=23.0.1271.20
Google Chrome=23.0.1271.21
Google Chrome=23.0.1271.22
Google Chrome=23.0.1271.23
Google Chrome=23.0.1271.24
Google Chrome=23.0.1271.26
Google Chrome=23.0.1271.30
Google Chrome=23.0.1271.31
Google Chrome=23.0.1271.32
Google Chrome=23.0.1271.33
Google Chrome=23.0.1271.35
Google Chrome=23.0.1271.36
Google Chrome=23.0.1271.37
Google Chrome=23.0.1271.38
Google Chrome=23.0.1271.39
Google Chrome=23.0.1271.40
Google Chrome=23.0.1271.41
Google Chrome=23.0.1271.44
Google Chrome=23.0.1271.45
Google Chrome=23.0.1271.46
Google Chrome=23.0.1271.49
Google Chrome=23.0.1271.50
Google Chrome=23.0.1271.51
Google Chrome=23.0.1271.52
Google Chrome=23.0.1271.53
Google Chrome=23.0.1271.54
Google Chrome=23.0.1271.55
Google Chrome=23.0.1271.56
Google Chrome=23.0.1271.57
Google Chrome=23.0.1271.58
Google Chrome=23.0.1271.59
Google Chrome=23.0.1271.60
Google Chrome=23.0.1271.61
Google Chrome=23.0.1271.62
Google Chrome=23.0.1271.64
Google Chrome=23.0.1271.83
Google Chrome=23.0.1271.84
Google Chrome=23.0.1271.85
Google Chrome=23.0.1271.86
Google Chrome=23.0.1271.87
Google Chrome=23.0.1271.88
openSUSE openSUSE=12.1
openSUSE openSUSE=12.2
Remediation
Patch Available
Event History
Nov 28, 2012
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5136?
CVE-2012-5136 has a medium severity rating that could lead to denial of service and potentially unknown impacts.
2
How do I fix CVE-2012-5136?
To fix CVE-2012-5136, update Google Chrome to version 23.0.1271.91 or later.
3
What types of attacks can CVE-2012-5136 enable?
CVE-2012-5136 may enable remote attackers to conduct denial of service attacks via crafted HTML documents.
4
Which versions of Google Chrome are affected by CVE-2012-5136?
CVE-2012-5136 affects multiple versions of Google Chrome prior to 23.0.1271.91.
5
Is there a workaround for CVE-2012-5136?
There is no official workaround for CVE-2012-5136; updating to a secure version is recommended.