CVE-2012-4903 — Google Chrome vulnerability

CWE-2644 documents2 sources
Severity
5.0MEDIUMNVD
EPSS
0.2%
top 53.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome
Timeline
PublishedSep 13
Latest updateMay 17

Description

Google Chrome before 18.0.1025308 on Android does not properly restrict access to file: URLs, which allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by obtaining credential data, a different vulnerability than CVE-2012-4906.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDgoogle/chrome18.0.1025306

🔴Vulnerability Details

2
GHSA
GHSA-v25g-5mj4-74p6: Google Chrome before 18↗2022-05-17
▶
GHSA
GHSA-6x7x-2jp3-xpvf: Google Chrome before 18↗2022-05-17
▶
CVE-2012-4903 — Google Chrome vulnerability | cvebase