CVE-2012-5138: Critical severity google chrome (trace event) vulnerability
Published Dec 4, 2012
·Updated
Google Chrome before 23.0.1271.95 does not properly handle file paths, which has unspecified impact and attack vectors.
Affected Software
68 affected components
Google Chrome<=23.0.1271.94
Google Chrome=23.0.1271.0
Google Chrome=23.0.1271.1
Google Chrome=23.0.1271.2
Google Chrome=23.0.1271.3
Google Chrome=23.0.1271.4
Google Chrome=23.0.1271.5
Google Chrome=23.0.1271.6
Google Chrome=23.0.1271.7
Google Chrome=23.0.1271.8
Google Chrome=23.0.1271.9
Google Chrome=23.0.1271.10
Google Chrome=23.0.1271.11
Google Chrome=23.0.1271.12
Google Chrome=23.0.1271.13
Google Chrome=23.0.1271.14
Google Chrome=23.0.1271.15
Google Chrome=23.0.1271.16
Google Chrome=23.0.1271.17
Google Chrome=23.0.1271.18
Google Chrome=23.0.1271.19
Google Chrome=23.0.1271.20
Google Chrome=23.0.1271.21
Google Chrome=23.0.1271.22
Google Chrome=23.0.1271.23
Google Chrome=23.0.1271.24
Google Chrome=23.0.1271.26
Google Chrome=23.0.1271.30
Google Chrome=23.0.1271.31
Google Chrome=23.0.1271.32
Google Chrome=23.0.1271.33
Google Chrome=23.0.1271.35
Google Chrome=23.0.1271.36
Google Chrome=23.0.1271.37
Google Chrome=23.0.1271.38
Google Chrome=23.0.1271.39
Google Chrome=23.0.1271.40
Google Chrome=23.0.1271.41
Google Chrome=23.0.1271.44
Google Chrome=23.0.1271.45
Google Chrome=23.0.1271.46
Google Chrome=23.0.1271.49
Google Chrome=23.0.1271.50
Google Chrome=23.0.1271.51
Google Chrome=23.0.1271.52
Google Chrome=23.0.1271.53
Google Chrome=23.0.1271.54
Google Chrome=23.0.1271.55
Google Chrome=23.0.1271.56
Google Chrome=23.0.1271.57
Google Chrome=23.0.1271.58
Google Chrome=23.0.1271.59
Google Chrome=23.0.1271.60
Google Chrome=23.0.1271.61
Google Chrome=23.0.1271.62
Google Chrome=23.0.1271.64
Google Chrome=23.0.1271.83
Google Chrome=23.0.1271.84
Google Chrome=23.0.1271.85
Google Chrome=23.0.1271.86
Google Chrome=23.0.1271.87
Google Chrome=23.0.1271.88
Google Chrome=23.0.1271.89
Google Chrome=23.0.1271.91
Google Chrome=23.0.1271.92
Google Chrome=23.0.1271.93
openSUSE openSUSE=12.1
openSUSE openSUSE=12.2
Remediation
Patch Available
Event History
Dec 4, 2012
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5138?
The severity of CVE-2012-5138 is considered moderate due to unspecified impacts and potential attack vectors.
2
How do I fix CVE-2012-5138?
To fix CVE-2012-5138, users should update Google Chrome to version 23.0.1271.95 or later.
3
Which versions of Google Chrome are affected by CVE-2012-5138?
CVE-2012-5138 affects Google Chrome versions prior to 23.0.1271.95.
4
Can CVE-2012-5138 be exploited remotely?
Yes, CVE-2012-5138 may be exploitable remotely due to its impact on file path handling.
5
What type of vulnerability is CVE-2012-5138 classified as?
CVE-2012-5138 is classified as a path traversal vulnerability.