Description
Google Chrome before 19.0.1084.46 on Windows uses an incorrect search path for the Windows Media Player plug-in, which might allow local users to gain privileges via a Trojan horse plug-in in an unspecified directory.
References (8)
Core 8
Core References
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1027067
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15618
Vendor Advisory x_refsource_confirm
http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/53540
Issue Tracking, Patch x_refsource_confirm
http://code.google.com/p/chromium/issues/detail?id=124216
Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00009.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/75603
Scores
EPSS
0.0027
EPSS Percentile
19.3%
Details
CWE
CWE-264
Status
published
Products (2)
google/chrome
< 19.0.1084.45
opensuse/opensuse
12.1
Published
May 16, 2012
Tracked Since
Feb 18, 2026