CVE-2012-5128: google chrome
CVSS: 7.5v2.0HighModified
AliasesUBUNTU-CVE-2012-5128
Published 07-11-2012Last modified 06-08-2024
Vulnerability summary
CVE-2012-5128 is a high (CVSS 7.5) vulnerability in google chrome. EPSS estimates a 1.24% chance of exploitation in the next 30 days, higher than 68.7% of scored vulnerabilities.
CVSS score
7.5/10
010
High · v2.0 (NVD)EPSS score
1.24%
0%100%
Low · -0.06 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 07-11-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, does not properly perform write operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS metrics
1 score · 1 source · 1 versionHigh 7.5Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
1.24%
Chance of exploitation in the next 30 days
Percentile
69%
Versus all other CVEs
30-day change
-0.06 pp
From 1.30% on 18-09-2026
18-09-202618-10-2026
EPSS score1.24%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Google2 products
- chromeEOL≤ 23.0.1271.62 | 23.0.1271.0 | 23.0.1271.1 | 23.0.1271.2 | 23.0.1271.3 | 23.0.1271.4 | 23.0.1271.5 | 23.0.1271.6 | 23.0.1271.7 | 23.0.1271.8 | 23.0.1271.9 | 23.0.1271.10 | 23.0.1271.11 | 23.0.1271.12 | 23.0.1271.13 | 23.0.1271.14 | 23.0.1271.15 | 23.0.1271.16 | 23.0.1271.17 | 23.0.1271.18 | 23.0.1271.19 | 23.0.1271.20 | 23.0.1271.21 | 23.0.1271.22 | 23.0.1271.23 | 23.0.1271.24 | 23.0.1271.26 | 23.0.1271.30 | 23.0.1271.31 | 23.0.1271.32 | 23.0.1271.33 | 23.0.1271.35 | 23.0.1271.36 | 23.0.1271.37 | 23.0.1271.38 | 23.0.1271.39 | 23.0.1271.40 | 23.0.1271.41 | 23.0.1271.44 | 23.0.1271.45 | 23.0.1271.46 | 23.0.1271.49 | 23.0.1271.50 | 23.0.1271.51 | 23.0.1271.52 | 23.0.1271.53 | 23.0.1271.54 | 23.0.1271.55 | 23.0.1271.56 | 23.0.1271.57 | 23.0.1271.58 | 23.0.1271.59 | 23.0.1271.60 | 23.0.1271.61
- v8≤ 3.13.7 | 1.0 | 3.12.0 | 3.12.1 | 3.12.2 | 3.12.3 | 3.12.4 | 3.12.5 | 3.12.6 | 3.12.7 | 3.12.8 | 3.12.9 | 3.12.10 | 3.12.11 | 3.12.12 | 3.12.13 | 3.12.14 | 3.12.15 | 3.12.16 | 3.12.17 | 3.12.18 | 3.12.19 | 3.13.0 | 3.13.1 | 3.13.2 | 3.13.3 | 3.13.4 | 3.13.5 | 3.13.6
Ubuntu1 product
- libv8-3.14All versions (No fix recorded)
2 vendors · 3 products
References
7 links- googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.htmlX Refsource CONFIRMREPORT
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15221VDB EntrySignatureX Refsource OVAL