NVD

Id
44588  
Name
CVE-2012-2897  
Description
The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as used by Google Chrome before 22.0.1229.79 and other programs, do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted TrueType font file, aka "Windows Font Parsing Vulnerability" or "TrueType Font Parsing Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-09-26  
Modified Date
2013-11-02  
Seq
2012-2897  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
223904 44588 CVE-2012-2897 http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html  View
223905 44588 CVE-2012-2897 oval:org.mitre.oval:def:15847  View
223906 44588 CVE-2012-2897 MS12-075  View
223907 44588 CVE-2012-2897 1027750  View
223908 44588 CVE-2012-2897 TA12-318A  View
223909 44588 CVE-2012-2897 google-chrome-cve20122897(78822)  View
223910 44588 CVE-2012-2897 https://code.google.com/p/chromium/issues/detail?id=146254  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28929 JVNDB-2012-004636 Google Chrome で使用される Microsoft Windows のカーネルモードドライバにおける任意のコードを実行される脆弱性 Google Chrome および他の製品で使用される Microsoft Windows のカーネルモードドライバは、メモリのオブジェクトを適切に処理しないため、任意のコードを実行される脆弱性が存在します。 CVE-2012-2897 56135 CVE-2012-2897 44588 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004636.html 2012-09-25 2012-11-16 View