Strix
26.1K

CVE-2012-5127

UnknownEPSS 1.09%

Last modified

CVE-2012-5127 is a vulnerability of currently unknown severity. Integer overflow in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted WebP image.. EPSS estimates a 1.09% chance of exploitation in the next 30 days.

Description

Integer overflow in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted WebP image.

Metrics

EPSS Probability
1.09%

61.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
GoogleChrome<= 23.0.1271.62
GoogleChrome23.0.1271.0
GoogleChrome23.0.1271.1
GoogleChrome23.0.1271.2
GoogleChrome23.0.1271.3
GoogleChrome23.0.1271.4
GoogleChrome23.0.1271.5
GoogleChrome23.0.1271.6
GoogleChrome23.0.1271.7
GoogleChrome23.0.1271.8
GoogleChrome23.0.1271.9
GoogleChrome23.0.1271.10
GoogleChrome23.0.1271.11
GoogleChrome23.0.1271.12
GoogleChrome23.0.1271.13
GoogleChrome23.0.1271.14
GoogleChrome23.0.1271.15
GoogleChrome23.0.1271.16
GoogleChrome23.0.1271.17
GoogleChrome23.0.1271.18
GoogleChrome23.0.1271.19
GoogleChrome23.0.1271.20
GoogleChrome23.0.1271.21
GoogleChrome23.0.1271.22
GoogleChrome23.0.1271.23
GoogleChrome23.0.1271.24
GoogleChrome23.0.1271.26
GoogleChrome23.0.1271.30
GoogleChrome23.0.1271.31
GoogleChrome23.0.1271.32
GoogleChrome23.0.1271.33
GoogleChrome23.0.1271.35
GoogleChrome23.0.1271.36
GoogleChrome23.0.1271.37
GoogleChrome23.0.1271.38
GoogleChrome23.0.1271.39
GoogleChrome23.0.1271.40
GoogleChrome23.0.1271.41
GoogleChrome23.0.1271.44
GoogleChrome23.0.1271.45
GoogleChrome23.0.1271.46
GoogleChrome23.0.1271.49
GoogleChrome23.0.1271.50
GoogleChrome23.0.1271.51
GoogleChrome23.0.1271.52
GoogleChrome23.0.1271.53
GoogleChrome23.0.1271.54
GoogleChrome23.0.1271.55
GoogleChrome23.0.1271.56
GoogleChrome23.0.1271.57

Showing 50 of 54 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2012-5127?
Integer overflow in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted WebP image.
How severe is CVE-2012-5127?
Severity scoring for CVE-2012-5127 is pending analysis. The EPSS model estimates a 1.09% probability of exploitation in the next 30 days.
How do I fix CVE-2012-5127?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2012

View all 2012CVEs →

Are you affected by CVE-2012-5127?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST