What is CVE-2012-5145?

CVE-2012-5145 is a vulnerability in Google Chrome, classified under Use After Free. Published 2013-01-15.

Is CVE-2012-5145 known to be exploited?

8 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Use After Free in Google Chrome

CVE-2012-5145

Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG layout.

Vulnerability class: Use-After-Free

EPSS: 0.013 (66.7th percentile) — read the EPSS interpretation.

Affected products

Google Chrome — versions 24.0.1272.0, 24.0.1272.1, 24.0.1273.0
Opensuse — versions 12.1, 12.2
N/a — versions n/a

Weakness classification (CWE)

CWE-416 — Use After Free

Public proof-of-concept exploits

References

chrome-cve-admin@google.com (x_refsource_CONFIRM)
chrome-cve-admin@google.com (vendor-advisory, x_refsource_SUSE)
chrome-cve-admin@google.com (signature, x_refsource_OVAL, vdb-entry)
chrome-cve-admin@google.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2012-5145?: CVE-2012-5145 is a vulnerability in Google Chrome, classified under Use After Free. Published 2013-01-15.
Is CVE-2012-5145 known to be exploited?: 8 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.