Ubuntu
chromium-browser package

  1. Bug #1025111
  2. Comment #0

Comment 0 for bug 1025111

Revision history for this message
Karma Dorje (taaroa) wrote : (CVE-2012-2842) <www-client/chromium-20.0.1132.57 : use-after-free vulnerability (CVE-2012-{2842,2843})

CVE-2012-2842 (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-2842)
Use-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to counter handling.

CVE-2012-2843 (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-2843)
Use-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to layout height tracking.

CVE-2012-2843 (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-2844)
The PDF functionality in Google Chrome before 20.0.1132.57 does not properly handle JavaScript code, which allows remote attackers to cause a denial of service (incorrect object access) or possibly have unspecified other impact via a crafted document.