Home > Vulnerability Database > CVE-2012-5117

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2012-5117

Date: November 7, 2012

Google Chrome before 23.0.1271.64 does not properly restrict the loading of an SVG subresource in the context of an IMG element, which has unspecified impact and remote attack vectors.

Severity Score

6.1

Related Resources (8)

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2012-5117

Url: http://googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html

Url: http://www.securityfocus.com/bid/56413

Url: https://nvd.nist.gov/vuln/detail/CVE-2012-5117

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15912

Url: https://code.google.com/p/chromium/issues/detail?id=145915

Url: http://osvdb.org/87076

Url: https://www.mend.io/vulnerability-database/CVE-2012-5117

Severity Score

6.1

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

CVSS v3.1

Base Score:	6.1
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	CHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	7.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us