Buffer overflow in Google Chrome

CVE-2012-2865

Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.

Vulnerability class: Buffer Overflow

EPSS: 0.011 (62.5th percentile) — read the EPSS interpretation.

Affected products

  • Google Chrome — versions 21.0.1180.0, 21.0.1180.1, 21.0.1180.2
  • Opensuse — versions 12.1, 12.2
  • N/a — versions n/a

Weakness classification (CWE)

References