CVE-2012-5148 — Improper Input Validation in Google Chrome

CWE-20 — Improper Input Validation2 documents2 sources
Severity
7.5HIGHNVD
EPSS
0.2%
top 58.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Google ChromeOpensuse
Timeline
PublishedJan 15
Latest updateMay 14

Description

The hyphenation functionality in Google Chrome before 24.0.1312.52 does not properly validate file names, which has unspecified impact and attack vectors.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶NVDgoogle/chrome24.0.1312.51+120
▶NVDopensuse/opensuse12.1, 12.2+1

🔴Vulnerability Details

1
GHSA
GHSA-7hrc-m7v8-76pp: The hyphenation functionality in Google Chrome before 24↗2022-05-14
▶
CVE-2012-5148 — Improper Input Validation in Google | cvebase