CVE-2012-1845

Use-after-free vulnerability in Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the DEP and ASLR protection mechanisms, and execute…

published March 22, 2012

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

🚨 A use-after-free vulnerability in Google Chrome 17.0.963.66 and earlier lets attackers sneak past critical security mechanisms! 🔥 Think of it like a chef leaving an oven on when they walk away — the heat still affects the kitchen even when no one is watching. Similarly, this vulnerability allows malicious code to run even after it's supposedly 'no longer needed'. With this loophole, an attacker could potentially execute arbitrary code, leading to devastating consequences like data theft or system compromise. Imagine an intruder slipping into your house while you think the door is locked — they could do anything!

Put simply

Think of it like a chef leaving an oven on when they walk away — the heat still affects the kitchen even when no one is watching. Similarly, this vulnerability allows malicious code to run even after it's supposedly 'no longer needed'. This vulnerability is a use-after-free flaw that bypasses Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR), allowing remote attackers to execute arbitrary code under certain circumstances without user interaction.

What to do

With this loophole, an attacker could potentially execute arbitrary code, leading to devastating consequences like data theft or system compromise. Imagine an intruder slipping into your house while you think the door is locked — they could do anything! Since this affects Chrome versions 17.0.963.66 and earlier, users should upgrade to the latest version of Chrome immediately to patch this vulnerability. Regularly check for updates and consider enabling automatic updates for added security. You’ve got this! Stay vigilant, keep your software updated, and you’ll be a security hero in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05207 · 92.4th percentile
Published
2012-03-22T16:00Z
EPSS history
Timeline
  • 22 MAR 16:00Z
    Use-after-free vulnerability in Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the DEP and ASLR protection mechanisms, and execute…
    cvelistv5