CVE-2012-5136

Google Chrome < 23.0.1271.91 - Denial of Service via INPUT Element Handling

Title source: llm

Description

Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted HTML document.

References (8)

Core 8

Core References

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15929

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html

Issue Tracking x_refsource_confirm

https://code.google.com/p/chromium/issues/detail?id=159829

Release Notes, Vendor Advisory x_refsource_confirm

http://googlechromereleases.blogspot.com/2012/11/stable-channel-update.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1027815

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/87885

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/80296

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/56684

Scores

EPSS 0.0135

EPSS Percentile 68.1%

Details

CWE

CWE-20

Status published

Products (50)

google/chrome 23.0.1271.0

google/chrome 23.0.1271.1

google/chrome 23.0.1271.2

google/chrome 23.0.1271.3

google/chrome 23.0.1271.4

google/chrome 23.0.1271.5

google/chrome 23.0.1271.6

google/chrome 23.0.1271.7

google/chrome 23.0.1271.8

google/chrome 23.0.1271.9

... and 40 more

Published Nov 28, 2012

Tracked Since Feb 18, 2026