FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2012-2848

This CVE name corresponds to:

Entered Topic
2012-08-10 chromium -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2012-2848 at cve.mitre.org

Details

Type Candidate
Name CVE-2012-2848
Phase Assigned(20120519)

Description

The drag-and-drop implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows user-assisted remote attackers to bypass intended file access restrictions via a crafted web site.

References

Source Reference
CONFIRM http://code.google.com/p/chromium/issues/detail?id=127525
CONFIRM http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html
OVAL oval:org.mitre.oval:def:15658

Copyright © 2005 The MITRE Corporation.

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.