CVE-2012-2807 - 漏洞详情

CVE-2012-2807 (CNNVD-201206-500)

MEDIUM

中文标题:

Google Chrome 数字错误漏洞

英文标题:

Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other produc...

CVSS分数: 6.8

发布时间: 2012-06-27 10:00:00

漏洞类型: 数字错误

状态: PUBLISHED

数据质量分数: 0.30

数据版本: v3

漏洞描述

中文描述:

Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。基于64-bit Linux平台使用Google Chrome 20.0.1132.43之前版本的libxml2中存在多个整数溢出漏洞。远程攻击者可利用该漏洞通过未知向量导致拒绝服务或未明其他影响。

英文描述:

Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CWE类型:

CWE-189

受影响产品

厂商	产品	版本	版本范围	平台	CPE
google	chrome	*	-	-	`cpe:2.3:a:google:chrome::::::::`
google	chrome	20.0.1132.0	-	-	`cpe:2.3:a:google:chrome:20.0.1132.0:::::::*`
google	chrome	20.0.1132.1	-	-	`cpe:2.3:a:google:chrome:20.0.1132.1:::::::*`
google	chrome	20.0.1132.2	-	-	`cpe:2.3:a:google:chrome:20.0.1132.2:::::::*`
google	chrome	20.0.1132.3	-	-	`cpe:2.3:a:google:chrome:20.0.1132.3:::::::*`
google	chrome	20.0.1132.4	-	-	`cpe:2.3:a:google:chrome:20.0.1132.4:::::::*`
google	chrome	20.0.1132.5	-	-	`cpe:2.3:a:google:chrome:20.0.1132.5:::::::*`
google	chrome	20.0.1132.6	-	-	`cpe:2.3:a:google:chrome:20.0.1132.6:::::::*`
google	chrome	20.0.1132.7	-	-	`cpe:2.3:a:google:chrome:20.0.1132.7:::::::*`
google	chrome	20.0.1132.8	-	-	`cpe:2.3:a:google:chrome:20.0.1132.8:::::::*`
google	chrome	20.0.1132.9	-	-	`cpe:2.3:a:google:chrome:20.0.1132.9:::::::*`
google	chrome	20.0.1132.10	-	-	`cpe:2.3:a:google:chrome:20.0.1132.10:::::::*`
google	chrome	20.0.1132.11	-	-	`cpe:2.3:a:google:chrome:20.0.1132.11:::::::*`
google	chrome	20.0.1132.12	-	-	`cpe:2.3:a:google:chrome:20.0.1132.12:::::::*`
google	chrome	20.0.1132.13	-	-	`cpe:2.3:a:google:chrome:20.0.1132.13:::::::*`
google	chrome	20.0.1132.14	-	-	`cpe:2.3:a:google:chrome:20.0.1132.14:::::::*`
google	chrome	20.0.1132.15	-	-	`cpe:2.3:a:google:chrome:20.0.1132.15:::::::*`
google	chrome	20.0.1132.16	-	-	`cpe:2.3:a:google:chrome:20.0.1132.16:::::::*`
google	chrome	20.0.1132.17	-	-	`cpe:2.3:a:google:chrome:20.0.1132.17:::::::*`
google	chrome	20.0.1132.18	-	-	`cpe:2.3:a:google:chrome:20.0.1132.18:::::::*`
google	chrome	20.0.1132.19	-	-	`cpe:2.3:a:google:chrome:20.0.1132.19:::::::*`
google	chrome	20.0.1132.20	-	-	`cpe:2.3:a:google:chrome:20.0.1132.20:::::::*`
google	chrome	20.0.1132.21	-	-	`cpe:2.3:a:google:chrome:20.0.1132.21:::::::*`
google	chrome	20.0.1132.22	-	-	`cpe:2.3:a:google:chrome:20.0.1132.22:::::::*`
google	chrome	20.0.1132.23	-	-	`cpe:2.3:a:google:chrome:20.0.1132.23:::::::*`
google	chrome	20.0.1132.24	-	-	`cpe:2.3:a:google:chrome:20.0.1132.24:::::::*`
google	chrome	20.0.1132.25	-	-	`cpe:2.3:a:google:chrome:20.0.1132.25:::::::*`
google	chrome	20.0.1132.26	-	-	`cpe:2.3:a:google:chrome:20.0.1132.26:::::::*`
google	chrome	20.0.1132.27	-	-	`cpe:2.3:a:google:chrome:20.0.1132.27:::::::*`
google	chrome	20.0.1132.28	-	-	`cpe:2.3:a:google:chrome:20.0.1132.28:::::::*`
google	chrome	20.0.1132.29	-	-	`cpe:2.3:a:google:chrome:20.0.1132.29:::::::*`
google	chrome	20.0.1132.30	-	-	`cpe:2.3:a:google:chrome:20.0.1132.30:::::::*`
google	chrome	20.0.1132.31	-	-	`cpe:2.3:a:google:chrome:20.0.1132.31:::::::*`
google	chrome	20.0.1132.32	-	-	`cpe:2.3:a:google:chrome:20.0.1132.32:::::::*`
google	chrome	20.0.1132.33	-	-	`cpe:2.3:a:google:chrome:20.0.1132.33:::::::*`
google	chrome	20.0.1132.34	-	-	`cpe:2.3:a:google:chrome:20.0.1132.34:::::::*`
google	chrome	20.0.1132.35	-	-	`cpe:2.3:a:google:chrome:20.0.1132.35:::::::*`
google	chrome	20.0.1132.36	-	-	`cpe:2.3:a:google:chrome:20.0.1132.36:::::::*`
google	chrome	20.0.1132.37	-	-	`cpe:2.3:a:google:chrome:20.0.1132.37:::::::*`
google	chrome	20.0.1132.38	-	-	`cpe:2.3:a:google:chrome:20.0.1132.38:::::::*`
google	chrome	20.0.1132.39	-	-	`cpe:2.3:a:google:chrome:20.0.1132.39:::::::*`
google	chrome	20.0.1132.40	-	-	`cpe:2.3:a:google:chrome:20.0.1132.40:::::::*`
google	chrome	20.0.1132.41	-	-	`cpe:2.3:a:google:chrome:20.0.1132.41:::::::*`
apple	iphone_os	*	-	-	`cpe:2.3:o:apple:iphone_os::::::::`
apple	iphone_os	1.0.0	-	-	`cpe:2.3:o:apple:iphone_os:1.0.0:::::::*`
apple	iphone_os	1.0.1	-	-	`cpe:2.3:o:apple:iphone_os:1.0.1:::::::*`
apple	iphone_os	1.0.2	-	-	`cpe:2.3:o:apple:iphone_os:1.0.2:::::::*`
apple	iphone_os	1.1.0	-	-	`cpe:2.3:o:apple:iphone_os:1.1.0:::::::*`
apple	iphone_os	1.1.1	-	-	`cpe:2.3:o:apple:iphone_os:1.1.1:::::::*`
apple	iphone_os	1.1.2	-	-	`cpe:2.3:o:apple:iphone_os:1.1.2:::::::*`
apple	iphone_os	1.1.3	-	-	`cpe:2.3:o:apple:iphone_os:1.1.3:::::::*`
apple	iphone_os	1.1.4	-	-	`cpe:2.3:o:apple:iphone_os:1.1.4:::::::*`
apple	iphone_os	1.1.5	-	-	`cpe:2.3:o:apple:iphone_os:1.1.5:::::::*`
apple	iphone_os	2.0	-	-	`cpe:2.3:o:apple:iphone_os:2.0:::::::*`
apple	iphone_os	2.0.0	-	-	`cpe:2.3:o:apple:iphone_os:2.0.0:::::::*`
apple	iphone_os	2.0.1	-	-	`cpe:2.3:o:apple:iphone_os:2.0.1:::::::*`
apple	iphone_os	2.0.2	-	-	`cpe:2.3:o:apple:iphone_os:2.0.2:::::::*`
apple	iphone_os	2.1	-	-	`cpe:2.3:o:apple:iphone_os:2.1:::::::*`
apple	iphone_os	2.1.1	-	-	`cpe:2.3:o:apple:iphone_os:2.1.1:::::::*`
apple	iphone_os	2.2	-	-	`cpe:2.3:o:apple:iphone_os:2.2:::::::*`
apple	iphone_os	2.2.1	-	-	`cpe:2.3:o:apple:iphone_os:2.2.1:::::::*`
apple	iphone_os	3.0	-	-	`cpe:2.3:o:apple:iphone_os:3.0:::::::*`
apple	iphone_os	3.0.1	-	-	`cpe:2.3:o:apple:iphone_os:3.0.1:::::::*`
apple	iphone_os	3.1	-	-	`cpe:2.3:o:apple:iphone_os:3.1:::::::*`
apple	iphone_os	3.1.2	-	-	`cpe:2.3:o:apple:iphone_os:3.1.2:::::::*`
apple	iphone_os	3.1.3	-	-	`cpe:2.3:o:apple:iphone_os:3.1.3:::::::*`
apple	iphone_os	3.2	-	-	`cpe:2.3:o:apple:iphone_os:3.2:::::::*`
apple	iphone_os	3.2.1	-	-	`cpe:2.3:o:apple:iphone_os:3.2.1:::::::*`
apple	iphone_os	3.2.2	-	-	`cpe:2.3:o:apple:iphone_os:3.2.2:::::::*`
apple	iphone_os	4.0	-	-	`cpe:2.3:o:apple:iphone_os:4.0:::::::*`
apple	iphone_os	4.0.1	-	-	`cpe:2.3:o:apple:iphone_os:4.0.1:::::::*`
apple	iphone_os	4.0.2	-	-	`cpe:2.3:o:apple:iphone_os:4.0.2:::::::*`
apple	iphone_os	4.1	-	-	`cpe:2.3:o:apple:iphone_os:4.1:::::::*`
apple	iphone_os	4.2.1	-	-	`cpe:2.3:o:apple:iphone_os:4.2.1:::::::*`
apple	iphone_os	4.2.5	-	-	`cpe:2.3:o:apple:iphone_os:4.2.5:::::::*`
apple	iphone_os	4.2.8	-	-	`cpe:2.3:o:apple:iphone_os:4.2.8:::::::*`
apple	iphone_os	4.3.0	-	-	`cpe:2.3:o:apple:iphone_os:4.3.0:::::::*`
apple	iphone_os	4.3.1	-	-	`cpe:2.3:o:apple:iphone_os:4.3.1:::::::*`
apple	iphone_os	4.3.2	-	-	`cpe:2.3:o:apple:iphone_os:4.3.2:::::::*`
apple	iphone_os	4.3.3	-	-	`cpe:2.3:o:apple:iphone_os:4.3.3:::::::*`
apple	iphone_os	4.3.5	-	-	`cpe:2.3:o:apple:iphone_os:4.3.5:::::::*`
apple	iphone_os	5.0	-	-	`cpe:2.3:o:apple:iphone_os:5.0:::::::*`
apple	iphone_os	5.0.1	-	-	`cpe:2.3:o:apple:iphone_os:5.0.1:::::::*`
apple	iphone_os	5.1	-	-	`cpe:2.3:o:apple:iphone_os:5.1:::::::*`
apple	iphone_os	5.1.1	-	-	`cpe:2.3:o:apple:iphone_os:5.1.1:::::::*`
apple	iphone_os	6.0	-	-	`cpe:2.3:o:apple:iphone_os:6.0:::::::*`
apple	iphone_os	6.0.1	-	-	`cpe:2.3:o:apple:iphone_os:6.0.1:::::::*`
apple	iphone_os	6.0.2	-	-	`cpe:2.3:o:apple:iphone_os:6.0.2:::::::*`
apple	iphone_os	6.1	-	-	`cpe:2.3:o:apple:iphone_os:6.1:::::::*`
apple	iphone_os	6.1.2	-	-	`cpe:2.3:o:apple:iphone_os:6.1.2:::::::*`
apple	iphone_os	6.1.3	-	-	`cpe:2.3:o:apple:iphone_os:6.1.3:::::::*`

解决方案

中文解决方案:

（暂无数据）

英文解决方案:

（暂无数据）

临时解决方案:

（暂无数据）

参考链接

APPLE-SA-2013-10-22-8 vendor-advisory
cve.org

访问

openSUSE-SU-2012:0813 vendor-advisory
cve.org

访问

SUSE-SU-2013:1627 vendor-advisory
cve.org

访问

无标题 x_refsource_CONFIRM
cve.org

访问

无标题 x_refsource_CONFIRM
cve.org

访问

50658 third-party-advisory
cve.org

访问

openSUSE-SU-2012:0975 vendor-advisory
cve.org

访问

54718 vdb-entry
cve.org

访问

54886 third-party-advisory
cve.org

访问

无标题 x_refsource_CONFIRM
cve.org

访问

55568 third-party-advisory
cve.org

访问

USN-1587-1 vendor-advisory
cve.org

访问

DSA-2521 vendor-advisory
cve.org

访问

MDVSA-2012:126 vendor-advisory
cve.org

访问

无标题 x_refsource_CONFIRM
cve.org

访问

50800 third-party-advisory
cve.org

访问

MDVSA-2013:056 vendor-advisory
cve.org

访问

APPLE-SA-2013-09-18-2 vendor-advisory
cve.org

访问

CVSS评分详情

6.8

MEDIUM

CVSS向量: AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS版本: 2.0

机密性

PARTIAL

完整性

PARTIAL

可用性

PARTIAL

时间信息

发布时间:

2012-06-27 10:00:00

修改时间:

2024-08-06 19:42:32

创建时间:

2025-11-11 15:33:24

更新时间:

2025-11-11 15:50:09

利用信息

暂无可利用代码信息

数据源详情

数据源	记录ID	版本	提取时间
CVE	`cve_CVE-2012-2807`	2025-11-11 15:18:28	2025-11-11 07:33:24
NVD	`nvd_CVE-2012-2807`	2025-11-11 14:53:57	2025-11-11 07:42:13
CNNVD	`cnnvd_CNNVD-201206-500`	2025-11-11 15:09:16	2025-11-11 07:50:09

版本与语言

当前版本: v3

主要语言: EN

支持语言:

EN ZH

安全公告

暂无安全公告信息

变更历史

v3 CNNVD

2025-11-11 15:50:09

vulnerability_type: 未提取 → 数字错误; cnnvd_id: 未提取 → CNNVD-201206-500; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']

查看详细变更

vulnerability_type: 未提取 -> 数字错误
cnnvd_id: 未提取 -> CNNVD-201206-500
data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']

v2 NVD

2025-11-11 15:42:13

cvss_score: 未提取 → 6.8; cvss_vector: NOT_EXTRACTED → AV:N/AC:M/Au:N/C:P/I:P/A:P; cvss_version: NOT_EXTRACTED → 2.0; affected_products_count: 0 → 91; data_sources: ['cve'] → ['cve', 'nvd']

查看详细变更

cvss_score: 未提取 -> 6.8
cvss_vector: NOT_EXTRACTED -> AV:N/AC:M/Au:N/C:P/I:P/A:P
cvss_version: NOT_EXTRACTED -> 2.0
affected_products_count: 0 -> 91
data_sources: ['cve'] -> ['cve', 'nvd']

CVE-2012-2807 (CNNVD-201206-500)

中文标题:

Google Chrome 数字错误漏洞

英文标题:

Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other produc...

漏洞描述

中文描述:

英文描述:

CWE类型:

标签:

受影响产品

解决方案

中文解决方案:

英文解决方案:

临时解决方案:

参考链接

CVSS评分详情

时间信息

利用信息

数据源详情

版本与语言

安全公告

变更历史