Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2012-5117


Google Chrome before 23.0.1271.64 does not properly restrict the loading of an SVG subresource in the context of an IMG element, which has unspecified impact and remote attack vectors.


Published

2012-11-07T11:43:14.977

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-264

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application google chrome ≤ 23.0.1271.62 Yes
Application google chrome 23.0.1271.0 Yes
Application google chrome 23.0.1271.1 Yes
Application google chrome 23.0.1271.2 Yes
Application google chrome 23.0.1271.3 Yes
Application google chrome 23.0.1271.4 Yes
Application google chrome 23.0.1271.5 Yes
Application google chrome 23.0.1271.6 Yes
Application google chrome 23.0.1271.7 Yes
Application google chrome 23.0.1271.8 Yes
Application google chrome 23.0.1271.9 Yes
Application google chrome 23.0.1271.10 Yes
Application google chrome 23.0.1271.11 Yes
Application google chrome 23.0.1271.12 Yes
Application google chrome 23.0.1271.13 Yes
Application google chrome 23.0.1271.14 Yes
Application google chrome 23.0.1271.15 Yes
Application google chrome 23.0.1271.16 Yes
Application google chrome 23.0.1271.17 Yes
Application google chrome 23.0.1271.18 Yes
Application google chrome 23.0.1271.19 Yes
Application google chrome 23.0.1271.20 Yes
Application google chrome 23.0.1271.21 Yes
Application google chrome 23.0.1271.22 Yes
Application google chrome 23.0.1271.23 Yes
Application google chrome 23.0.1271.24 Yes
Application google chrome 23.0.1271.26 Yes
Application google chrome 23.0.1271.30 Yes
Application google chrome 23.0.1271.31 Yes
Application google chrome 23.0.1271.32 Yes
Application google chrome 23.0.1271.33 Yes
Application google chrome 23.0.1271.35 Yes
Application google chrome 23.0.1271.36 Yes
Application google chrome 23.0.1271.37 Yes
Application google chrome 23.0.1271.38 Yes
Application google chrome 23.0.1271.39 Yes
Application google chrome 23.0.1271.40 Yes
Application google chrome 23.0.1271.41 Yes
Application google chrome 23.0.1271.44 Yes
Application google chrome 23.0.1271.45 Yes
Application google chrome 23.0.1271.46 Yes
Application google chrome 23.0.1271.49 Yes
Application google chrome 23.0.1271.50 Yes
Application google chrome 23.0.1271.51 Yes
Application google chrome 23.0.1271.52 Yes
Application google chrome 23.0.1271.53 Yes
Application google chrome 23.0.1271.54 Yes
Application google chrome 23.0.1271.55 Yes
Application google chrome 23.0.1271.56 Yes
Application google chrome 23.0.1271.57 Yes
Application google chrome 23.0.1271.58 Yes
Application google chrome 23.0.1271.59 Yes
Application google chrome 23.0.1271.60 Yes
Application google chrome 23.0.1271.61 Yes

References