CVE-2012-2890

Publication date 26 September 2012

Last updated 24 July 2024

Ubuntu priority

Description

Use-after-free vulnerability in the PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
chromium-browser	12.04 LTS precise	Not affected
	11.10 oneiric	Not affected
	11.04 natty	Not affected
	10.04 LTS lucid	Not affected
	8.04 LTS hardy	Not in release

How can I get the fixes?
What do statuses mean?

Notes

seth-arnold

Debian triage notes no PDF capability in chromium-browser; confirmed via chrome://plugins that no PDF plugin exists, could not load multiple PDFs via http or local file on 12.04 LTS.

References

MITRE
NVD
Launchpad
Debian

Other references

https://code.google.com/p/chromium/issues/detail?id=147402
https://code.google.com/p/chromium/issues/detail?id=144072
https://code.google.com/p/chromium/issues/detail?id=143798
http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html
https://www.cve.org/CVERecord?id=CVE-2012-2890