What is CVE-2012-5157?

CVE-2012-5157 is a vulnerability in Google Chrome, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2013-01-15.

Is CVE-2012-5157 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Google Chrome

CVE-2012-5157

Google Chrome before 24.0.1312.52 does not properly handle image data in PDF documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.

Vulnerability class: Buffer Overflow

EPSS: 0.013 (68.2th percentile) — read the EPSS interpretation.

Affected products

Google Chrome — versions 24.0.1272.0, 24.0.1272.1, 24.0.1273.0
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

References

chrome-cve-admin@google.com (signature, x_refsource_OVAL, vdb-entry)
chrome-cve-admin@google.com (x_refsource_CONFIRM)
chrome-cve-admin@google.com (x_refsource_CONFIRM)
chrome-cve-admin@google.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2012-5157?: CVE-2012-5157 is a vulnerability in Google Chrome, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2013-01-15.
Is CVE-2012-5157 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.