CVE-2012-2895

Publication date 26 September 2012

Last updated 24 July 2024

Ubuntu priority

Description

The PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
chromium-browser	12.04 LTS precise	Not affected
	11.10 oneiric	Not affected
	11.04 natty	Not affected
	10.04 LTS lucid	Not affected
	8.04 LTS hardy	Not in release

How can I get the fixes?
What do statuses mean?

Notes

seth-arnold

Debian triage notes no PDF capability in chromium-browser; confirmed via chrome://plugins that no PDF plugin exists, could not load multiple PDFs via http or local file on 12.04 LTS.

References

MITRE
NVD
Launchpad
Debian

Other references

https://code.google.com/p/chromium/issues/detail?id=146460
https://code.google.com/p/chromium/issues/detail?id=145157
https://code.google.com/p/chromium/issues/detail?id=145029
http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html
https://www.cve.org/CVERecord?id=CVE-2012-2895