CVE-2012-2864
critical
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0
Description
Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, allows remote attackers to execute arbitrary code via unspecified vectors that trigger an "array overflow."
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2012-2864
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| debian | bookworm | fixed | 8.0.4-2 |
| debian | bullseye | fixed | 8.0.4-2 |
| debian | forky | fixed | 8.0.4-2 |
| debian | sid | fixed | 8.0.4-2 |
| debian | trixie | fixed | 8.0.4-2 |
References
- http://code.google.com/p/chromium/issues/detail?id=141901
- http://googlechromereleases.blogspot.com/2012/08/stable-channel-update-for-chrome-os.html
- http://secunia.com/advisories/51215
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:103
- http://www.ubuntu.com/usn/USN-1623-1
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0264
- https://security-tracker.debian.org/tracker/CVE-2012-2864
CWEs
CWE-119
Verify integrity in audit chain (admin only). AS-IS.