cbcvebase.
CVE-2012-2847
published 2012-08-06

CVE-2012-2847: Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not request user confirmation before…

PriorityP414medium4.3CVSS 2.0
AVNACMAuNCNINAP
EPSS
0.75%
51.4th percentile
Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not request user confirmation before continuing a large series of downloads, which allows user-assisted remote attackers to cause a denial of service (resource consumption) via a crafted web site.

Affected

27 ranges· showing 25
VendorProductVersion rangeFixed in
googlechrome<= 21.0.1180.56—
googlechrome<= 21.0.1180.59—
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
googlechrome——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.