CVE-2012-5142: Code Injection
Published Dec 12, 2012
·Updated
Google Chrome before 23.0.1271.97 does not properly handle history navigation, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
Affected Software
70 affected components
Google Chrome<=23.0.1271.96
Google Chrome=23.0.1271.0
Google Chrome=23.0.1271.1
Google Chrome=23.0.1271.2
Google Chrome=23.0.1271.3
Google Chrome=23.0.1271.4
Google Chrome=23.0.1271.5
Google Chrome=23.0.1271.6
Google Chrome=23.0.1271.7
Google Chrome=23.0.1271.8
Google Chrome=23.0.1271.9
Google Chrome=23.0.1271.10
Google Chrome=23.0.1271.11
Google Chrome=23.0.1271.12
Google Chrome=23.0.1271.13
Google Chrome=23.0.1271.14
Google Chrome=23.0.1271.15
Google Chrome=23.0.1271.16
Google Chrome=23.0.1271.17
Google Chrome=23.0.1271.18
Google Chrome=23.0.1271.19
Google Chrome=23.0.1271.20
Google Chrome=23.0.1271.21
Google Chrome=23.0.1271.22
Google Chrome=23.0.1271.23
Google Chrome=23.0.1271.24
Google Chrome=23.0.1271.26
Google Chrome=23.0.1271.30
Google Chrome=23.0.1271.31
Google Chrome=23.0.1271.32
Google Chrome=23.0.1271.33
Google Chrome=23.0.1271.35
Google Chrome=23.0.1271.36
Google Chrome=23.0.1271.37
Google Chrome=23.0.1271.38
Google Chrome=23.0.1271.39
Google Chrome=23.0.1271.40
Google Chrome=23.0.1271.41
Google Chrome=23.0.1271.44
Google Chrome=23.0.1271.45
Google Chrome=23.0.1271.46
Google Chrome=23.0.1271.49
Google Chrome=23.0.1271.50
Google Chrome=23.0.1271.51
Google Chrome=23.0.1271.52
Google Chrome=23.0.1271.53
Google Chrome=23.0.1271.54
Google Chrome=23.0.1271.55
Google Chrome=23.0.1271.56
Google Chrome=23.0.1271.57
Google Chrome=23.0.1271.58
Google Chrome=23.0.1271.59
Google Chrome=23.0.1271.60
Google Chrome=23.0.1271.61
Google Chrome=23.0.1271.62
Google Chrome=23.0.1271.64
Google Chrome=23.0.1271.83
Google Chrome=23.0.1271.84
Google Chrome=23.0.1271.85
Google Chrome=23.0.1271.86
Google Chrome=23.0.1271.87
Google Chrome=23.0.1271.88
Google Chrome=23.0.1271.89
Google Chrome=23.0.1271.91
Google Chrome=23.0.1271.92
Google Chrome=23.0.1271.93
Google Chrome=23.0.1271.94
Google Chrome=23.0.1271.95
openSUSE openSUSE=12.1
openSUSE openSUSE=12.2
Remediation
Patch Available
Event History
Dec 12, 2012
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5142?
The severity of CVE-2012-5142 is considered high due to the potential for remote code execution and application crashes.
2
How do I fix CVE-2012-5142?
To fix CVE-2012-5142, you should update Google Chrome to version 23.0.1271.97 or later.
3
What types of attacks can exploit CVE-2012-5142?
CVE-2012-5142 can be exploited by remote attackers through unspecified vectors that manipulate history navigation.
4
Which versions of Google Chrome are affected by CVE-2012-5142?
All versions of Google Chrome prior to 23.0.1271.97 are affected by CVE-2012-5142.
5
Is there a workaround for CVE-2012-5142?
There are no known workarounds for CVE-2012-5142; updating Chrome is the recommended solution.