Vulnerability Description
Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, allows remote attackers to execute arbitrary code via unspecified vectors that trigger an "array overflow."
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Chrome Os | <= 21.0.1180.81 | |
| Acer | Ac700 Chromebook | - |
| Cr-48 Chromebook | - | |
| Samsung | Series 5 550 Chromebook | - |
| Samsung | Series 5 Chromebook | - |
Related Weaknesses (CWE)
References
- http://code.google.com/p/chromium/issues/detail?id=141901
- http://googlechromereleases.blogspot.com/2012/08/stable-channel-update-for-chrom
- http://secunia.com/advisories/51215
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:103
- http://www.ubuntu.com/usn/USN-1623-1
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0264
- http://code.google.com/p/chromium/issues/detail?id=141901
- http://googlechromereleases.blogspot.com/2012/08/stable-channel-update-for-chrom
- http://secunia.com/advisories/51215
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:103
- http://www.ubuntu.com/usn/USN-1623-1
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0264
FAQ
What is CVE-2012-2864?
CVE-2012-2864 is a vulnerability with a CVSS score of 10.0 (HIGH). Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, allows remote attackers to execute ...
How severe is CVE-2012-2864?
CVE-2012-2864 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-2864?
Check the references section above for vendor advisories and patch information. Affected products include: Google Chrome Os, Acer Ac700 Chromebook, Google Cr-48 Chromebook, Samsung Series 5 550 Chromebook, Samsung Series 5 Chromebook.