high7.5
CVE-2012-5148
The hyphenation functionality in Google Chrome before 24.0.1312.52 does not properly validate file names, which has unspecified impact and attack vectors.
Impact
The hyphenation functionality in Google Chrome before 24.0.1312.52 does not properly validate file names, which has unspecified impact and attack vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opensuse | Opensuse | Versions 12.1, 12.2 |
| Chrome | through 24.0.1312.51 Versions 24.0.1272.0, 24.0.1272.1, 24.0.1273.0, 24.0.1274.0, 24.0.1275.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html
- https://code.google.com/p/chromium/issues/detail?id=167122
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15746
- http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html
- https://code.google.com/p/chromium/issues/detail?id=167122
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15746