6.8

CVE-2012-2807: apple iphone_os Numeric Errors

Modified
AliasesDEBIAN-CVE-2012-2807DSA-2521-1
Published 27-06-2012Last modified 06-08-2024

Vulnerability summary

CVE-2012-2807 is a medium (CVSS 6.8) Numeric Errors vulnerability in apple iphone_os. EPSS estimates a 1.57% chance of exploitation in the next 30 days, higher than 75.3% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 6.8, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
6.8/10
010
Medium · v2.0 (NVD)
EPSS score
1.57%
0%100%
Low · -0.02 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 3 · Related 2
OPENSUSE-SU-2024:10171-1OPENSUSE-SU-2024:12948-1RHSA-2012:1288

Timeline

  1. 27-06-2012
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

1.57%

Chance of exploitation in the next 30 days

Percentile

75%

Versus all other CVEs

30-day change

Decrease -0.02 pp

From 1.58% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Apple1 product
  • iphone_osEOL≤ 6.1.4 | 10.0 | 1.0.1 | 1.0.2 | 1.1.0 | 1.1.1 | 1.1.2 | 1.1.3 | 1.1.4 | 1.1.5 | 2.0 | 2.0.0 | 2.0.1 | 2.0.2 | 2.1 | 2.1.1 | 2.2 | 2.2.1 | 3.0 | 3.0.1 | 3.1 | 3.1.2 | 3.1.3 | 3.2 | 3.2.1 | 3.2.2 | 4.0 | 4.0.1 | 4.0.2 | 4.1 | 4.2.1 | 4.2.5 | 4.2.8 | 4.3.0 | 4.3.1 | 4.3.2 | 4.3.3 | 4.3.5 | 5.0 | 5.0.1 | 5.1 | 5.1.1 | 6.0 | 6.0.1 | 6.0.2 | 6.1 | 6.1.2 | 6.1.3
Debian1 product
  • libxml2< 2.7.8.dfsg-2+squeeze5 | < 2.8.0+dfsg1-5
Google1 product
  • chromeEOL≤ 20.0.1132.42 | 20.0.1132.0 | 20.0.1132.1 | 20.0.1132.2 | 20.0.1132.3 | 20.0.1132.4 | 20.0.1132.5 | 20.0.1132.6 | 20.0.1132.7 | 20.0.1132.8 | 20.0.1132.9 | 20.0.1132.10 | 20.0.1132.11 | 20.0.1132.12 | 20.0.1132.13 | 20.0.1132.14 | 20.0.1132.15 | 20.0.1132.16 | 20.0.1132.17 | 20.0.1132.18 | 20.0.1132.19 | 20.0.1132.20 | 20.0.1132.21 | 20.0.1132.22 | 20.0.1132.23 | 20.0.1132.24 | 20.0.1132.25 | 20.0.1132.26 | 20.0.1132.27 | 20.0.1132.28 | 20.0.1132.29 | 20.0.1132.30 | 20.0.1132.31 | 20.0.1132.32 | 20.0.1132.33 | 20.0.1132.34 | 20.0.1132.35 | 20.0.1132.36 | 20.0.1132.37 | 20.0.1132.38 | 20.0.1132.39 | 20.0.1132.40 | 20.0.1132.41

3 vendors · 3 products

References

19 links
Show all 19 references