NVD

Id
46356  
Name
CVE-2012-5144  
Description
Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to "an off-by-one overwrite when switching to LTP profile from MAIN."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-12-12  
Modified Date
2016-10-06  
Seq
2012-5144  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
232536 46356 CVE-2012-5144 http://googlechromereleases.blogspot.com/2012/12/stable-channel-update.html  View
232537 46356 CVE-2012-5144 http://libav.org/releases/libav-0.7.7.changelog  View
232538 46356 CVE-2012-5144 http://libav.org/releases/libav-0.8.5.changelog  View
232539 46356 CVE-2012-5144 openSUSE-SU-2012:1682  View
232540 46356 CVE-2012-5144 oval:org.mitre.oval:def:16007  View
232541 46356 CVE-2012-5144 USN-1705-1  View
232542 46356 CVE-2012-5144 https://code.google.com/p/chromium/issues/detail?id=161639  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29999 JVNDB-2012-005706 Google Chrome におけるサービス運用妨害 (スタックメモリ破損) の脆弱性 Google Chrome は、AAC 復号を適切に実行しないため、サービス運用妨害 (スタックメモリ破損) 状態など、不特定の影響を受ける脆弱性が存在します。 CVE-2012-5144 58382 CVE-2012-5144 46356 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005706.html 2012-12-11 2012-12-13 View