Google Chrome before 23.0.1271.64 does not properly restrict the loading of an SVG subresource in the context of an IMG element, which has unspecified impact and remote attack vectors.
References
Link | Resource |
---|---|
https://code.google.com/p/chromium/issues/detail?id=145915 | Patch Issue Tracking |
http://googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html | Vendor Advisory |
http://osvdb.org/87076 | Broken Link |
http://www.securityfocus.com/bid/56413 | Third Party Advisory VDB Entry |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15912 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2012-11-07 03:43
Updated : 2017-09-18 18:35
NVD link : CVE-2012-5117
Mitre link : CVE-2012-5117
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
- chrome