Vulnerability Details : CVE-2012-2816
Google Chrome before 20.0.1132.43 on Windows does not properly isolate sandboxed processes, which might allow remote attackers to cause a denial of service (process interference) via unspecified vectors.
Vulnerability category: Denial of service
Products affected by CVE-2012-2816
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.17:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.6:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.9:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.21:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.0:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.29:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.40:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.39:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.18:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.19:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.14:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.7:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.4:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.22:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.23:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.30:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.31:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.15:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.12:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.13:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.5:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.10:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.24:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.3:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.25:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.26:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.36:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.35:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.32:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.38:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.37:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.41:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.20:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.16:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.11:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.8:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.2:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.1:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.27:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.28:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.34:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:20.0.1132.33:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-2816
0.96%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 81 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-2816
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.8
|
HIGH | AV:N/AC:L/Au:N/C:N/I:N/A:C |
10.0
|
6.9
|
NIST |
References for CVE-2012-2816
-
http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html
Chrome Releases: Stable Channel UpdateVendor Advisory
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15591
Repository / Oval Repository
-
http://code.google.com/p/chromium/issues/detail?id=119150
119150 - Sandboxed processes should not be able to open other sandboxed processes - chromium - Monorail
-
http://code.google.com/p/chromium/issues/detail?id=119250
119250 - GPU, Plugin, and NaCl processes have PROCESS_DUP_HANDLE permission on renderer processes - chromium - MonorailVendor Advisory
-
https://hermes.opensuse.org/messages/15075728
openSUSE.org - 503
Jump to