MEDIUM · 6.8

CVE-2012-5136

Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element, which allows remote attackers to cause a denial of service or possib...

Vulnerability Description

Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted HTML document.

CVSS Score

6.8

MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
GoogleChrome<= 23.0.1271.89
OpensuseOpensuse12.1

Related Weaknesses (CWE)

References

FAQ

What is CVE-2012-5136?

CVE-2012-5136 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element, which allows remote attackers to cause a denial of service or possib...

How severe is CVE-2012-5136?

CVE-2012-5136 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-5136?

Check the references section above for vendor advisories and patch information. Affected products include: Google Chrome, Opensuse Opensuse.