CVE-2012-2853
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
06/08/2012
Last modified:
11/04/2025
Description
The webRequest API in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not properly interact with the Chrome Web Store, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site.
Impact
Base Score 2.0
6.80
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | 21.0.1180.56 (including) | |
cpe:2.3:a:google:chrome:21.0.1180.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:google:chrome:21.0.1180.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:google:chrome:21.0.1180.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:google:chrome:21.0.1180.31:*:*:*:*:*:*:* | ||
cpe:2.3:a:google:chrome:21.0.1180.32:*:*:*:*:*:*:* | ||
cpe:2.3:a:google:chrome:21.0.1180.33:*:*:*:*:*:*:* | ||
cpe:2.3:a:google:chrome:21.0.1180.34:*:*:*:*:*:*:* | ||
cpe:2.3:a:google:chrome:21.0.1180.35:*:*:*:*:*:*:* | ||
cpe:2.3:a:google:chrome:21.0.1180.36:*:*:*:*:*:*:* | ||
cpe:2.3:a:google:chrome:21.0.1180.37:*:*:*:*:*:*:* | ||
cpe:2.3:a:google:chrome:21.0.1180.38:*:*:*:*:*:*:* | ||
cpe:2.3:a:google:chrome:21.0.1180.39:*:*:*:*:*:*:* | ||
cpe:2.3:a:google:chrome:21.0.1180.41:*:*:*:*:*:*:* | ||
cpe:2.3:a:google:chrome:21.0.1180.46:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://code.google.com/p/chromium/issues/detail?id=134101
- http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15439
- http://code.google.com/p/chromium/issues/detail?id=134101
- http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15439