Back to Database
Status published
High
CVE-2012-5127
Integer overflow in Google Chrome before 23.0.1271.64 allows remote attackers...
Vulnerability Description
Integer overflow in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted WebP image.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-5127
Credits & Attribution
No credits recorded in the NVD database.
References
- https://code.google.com/p/chromium/issues/detail?id=157079
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15943
- http://www.securityfocus.com/bid/56413
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79862
- http://googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html
- http://osvdb.org/87079
More from google
View All →CVE-2025-24959
Environment Variable Injection for dotenv API in zx
Low
1
CVE-2024-45601
Local file Inclusion via static file serving functionality in Mesop
High
7.5
CVE-2022-3708
Web Stories <= 1.24.0 - Server Side Request Forgery
Critical
9.6
CVE-2022-31055
Improper Access Control in kctf
High
7.5
CVE-2022-23569
`CHECK`-fails when building invalid tensor shapes in Tensorflow
Medium
6.5
Affected Vendor
Affected Software
chrome
Vulnerable Versions:
0, 23.0.1271.0, 23.0.1271.1, 23.0.1271.2, 23.0.1271.3, 23.0.1271.4, 23.0.1271.5, 23.0.1271.6, 23.0.1271.7, 23.0.1271.8, 23.0.1271.9, 23.0.1271.10, 23.0.1271.11, 23.0.1271.12, 23.0.1271.13, 23.0.1271.14, 23.0.1271.15, 23.0.1271.16, 23.0.1271.17, 23.0.1271.18, 23.0.1271.19, 23.0.1271.20, 23.0.1271.21, 23.0.1271.22, 23.0.1271.23, 23.0.1271.24, 23.0.1271.26, 23.0.1271.30, 23.0.1271.31, 23.0.1271.32, 23.0.1271.33, 23.0.1271.35, 23.0.1271.36, 23.0.1271.37, 23.0.1271.38, 23.0.1271.39, 23.0.1271.40, 23.0.1271.41, 23.0.1271.44, 23.0.1271.45, 23.0.1271.46, 23.0.1271.49, 23.0.1271.50, 23.0.1271.51, 23.0.1271.52, 23.0.1271.53, 23.0.1271.54, 23.0.1271.55, 23.0.1271.56, 23.0.1271.57, 23.0.1271.58, 23.0.1271.59, 23.0.1271.60, 23.0.1271.61
Timeline
Official Publish:
November 7th, 2012
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.