CVE-2012-5142

Google Chrome before 23.0.1271.97 does not properly handle history navigation, which allows remote attackers to execute arbitrary code or cause a denial of…

published December 12, 2012

CVSS
—
EPSS
3%
Percentile
85.9
In the wild
Unconfirmed
What it is

⚠️ A pesky bug in Google Chrome can turn history navigation into a wild ride! This flaw could allow attackers to execute arbitrary code, potentially crashing the application. 🚨 Think of it like an amusement park ride that suddenly malfunctions — instead of a smooth journey through memories, you’re tossed around with no control, risking a crash at any turn! An attacker could exploit this vulnerability to crash the browser, causing a denial of service, or worse, execute malicious code. Imagine losing your tabs or, even worse, exposing sensitive information while you thought you were just browsing!

Put simply

Think of it like an amusement park ride that suddenly malfunctions — instead of a smooth journey through memories, you’re tossed around with no control, risking a crash at any turn! This vulnerability arises from improper handling of history navigation in Google Chrome versions prior to 23.0.1271.97, allowing for potential arbitrary code execution or an application crash via unspecified vectors.

What to do

An attacker could exploit this vulnerability to crash the browser, causing a denial of service, or worse, execute malicious code. Imagine losing your tabs or, even worse, exposing sensitive information while you thought you were just browsing! To stay safe, make sure to update Google Chrome to version 23.0.1271.97 or later. Regularly check for updates to ensure you're protected against known vulnerabilities. 🛡️ You've got this! Update now and keep your browsing experience smooth and secure! 💪😊

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02732 · 85.9th percentile
Published
2012-12-12T11:00Z
EPSS history
Timeline
  • 12 DEC 11:00Z
    Google Chrome before 23.0.1271.97 does not properly handle history navigation, which allows remote attackers to execute arbitrary code or cause a denial of…
    cvelistv5