CVE-2012-5112

Description (CNA)

Use-after-free vulnerability in the SVG implementation in WebKit, as used in Google Chrome before 22.0.1229.94, allows remote attackers to execute arbitrary code via unspecified vectors.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15523
• http://secunia.com/advisories/50954
• http://support.apple.com/kb/HT5567
• http://code.google.com/p/chromium/issues/detail?id=154983
• http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.html
• http://lists.apple.com/archives/security-announce/2012/Nov/msg00001.html
• http://googlechromereleases.blogspot.com/2012/10/stable-channel-update_6105.html
• http://support.apple.com/kb/HT5568
• http://archives.neohapsis.com/archives/bugtraq/2012-11/0012.html
• http://blog.chromium.org/2012/10/pwnium-2-results-and-wrap-up_10.html
• http://code.google.com/p/chromium/issues/detail?id=154987
• http://osvdb.org/86149
• http://archives.neohapsis.com/archives/bugtraq/2012-11/0013.html

ADP enrichment