Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2012-2897

Overview

Vulnerability Score 10.0 10.0
CVE Id CVE-2012-2897
Last Modified 02 Nov 2013 11:24:46
Published 26 Sep 2012 06:56:05
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2012-2897

Summary

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as used by Google Chrome before 22.0.1229.79 and other programs, do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted TrueType font file, aka "Windows Font Parsing Vulnerability" or "TrueType Font Parsing Vulnerability."

Vulnerable Systems

Operating System

  • Microsoft Windows 7 -

  • Microsoft Windows 8 -

  • Microsoft Windows Rt -

  • Microsoft Windows Server 2003

  • Microsoft Windows Server 2008

  • Microsoft Windows Server 2008 -

  • Microsoft Windows Server 2008 R2

  • Microsoft Windows Server 2012 -

  • Microsoft Windows Vista

  • Microsoft Windows Vista -

  • Microsoft Windows Xp

  • Microsoft Windows Xp -

Application

  • Google Chrome 21.0.1180.0

  • Google Chrome 21.0.1180.1

  • Google Chrome 21.0.1180.2

  • Google Chrome 21.0.1180.31

  • Google Chrome 21.0.1180.32

  • Google Chrome 21.0.1180.33

  • Google Chrome 21.0.1180.34

  • Google Chrome 21.0.1180.35

  • Google Chrome 21.0.1180.36

  • Google Chrome 21.0.1180.37

  • Google Chrome 21.0.1180.38

  • Google Chrome 21.0.1180.39

  • Google Chrome 21.0.1180.41

  • Google Chrome 21.0.1180.46

  • Google Chrome 21.0.1180.47

  • Google Chrome 21.0.1180.48

  • Google Chrome 21.0.1180.49

  • Google Chrome 21.0.1180.50

  • Google Chrome 21.0.1180.51

  • Google Chrome 21.0.1180.52

  • Google Chrome 21.0.1180.53

  • Google Chrome 21.0.1180.54

  • Google Chrome 21.0.1180.55

  • Google Chrome 21.0.1180.56

  • Google Chrome 21.0.1180.57

  • Google Chrome 21.0.1180.59

  • Google Chrome 21.0.1180.60

  • Google Chrome 21.0.1180.61

  • Google Chrome 21.0.1180.62

  • Google Chrome 21.0.1180.63

  • Google Chrome 21.0.1180.64

  • Google Chrome 21.0.1180.68

  • Google Chrome 21.0.1180.69

  • Google Chrome 21.0.1180.70

  • Google Chrome 21.0.1180.71

  • Google Chrome 21.0.1180.72

  • Google Chrome 21.0.1180.73

  • Google Chrome 21.0.1180.74

  • Google Chrome 21.0.1180.75

  • Google Chrome 21.0.1180.76

  • Google Chrome 21.0.1180.77

  • Google Chrome 21.0.1180.78

  • Google Chrome 21.0.1180.79

  • Google Chrome 21.0.1180.80

  • Google Chrome 21.0.1180.81

  • Google Chrome 21.0.1180.82

  • Google Chrome 21.0.1180.83

  • Google Chrome 21.0.1180.84

  • Google Chrome 21.0.1180.85

  • Google Chrome 21.0.1180.86

  • Google Chrome 21.0.1180.87

  • Google Chrome 21.0.1180.88

  • Google Chrome 21.0.1180.89

  • Google Chrome 21.0.1180.90

  • Google Chrome 22.0.1229.0

  • Google Chrome 22.0.1229.1

  • Google Chrome 22.0.1229.10

  • Google Chrome 22.0.1229.11

  • Google Chrome 22.0.1229.12

  • Google Chrome 22.0.1229.14

  • Google Chrome 22.0.1229.16

  • Google Chrome 22.0.1229.17

  • Google Chrome 22.0.1229.18

  • Google Chrome 22.0.1229.2

  • Google Chrome 22.0.1229.20

  • Google Chrome 22.0.1229.21

  • Google Chrome 22.0.1229.22

  • Google Chrome 22.0.1229.23

  • Google Chrome 22.0.1229.24

  • Google Chrome 22.0.1229.25

  • Google Chrome 22.0.1229.26

  • Google Chrome 22.0.1229.27

  • Google Chrome 22.0.1229.28

  • Google Chrome 22.0.1229.29

  • Google Chrome 22.0.1229.3

  • Google Chrome 22.0.1229.31

  • Google Chrome 22.0.1229.32

  • Google Chrome 22.0.1229.33

  • Google Chrome 22.0.1229.35

  • Google Chrome 22.0.1229.36

  • Google Chrome 22.0.1229.37

  • Google Chrome 22.0.1229.39

  • Google Chrome 22.0.1229.4

  • Google Chrome 22.0.1229.48

  • Google Chrome 22.0.1229.49

  • Google Chrome 22.0.1229.50

  • Google Chrome 22.0.1229.51

  • Google Chrome 22.0.1229.52

  • Google Chrome 22.0.1229.53

  • Google Chrome 22.0.1229.54

  • Google Chrome 22.0.1229.55

  • Google Chrome 22.0.1229.56

  • Google Chrome 22.0.1229.57

  • Google Chrome 22.0.1229.58

  • Google Chrome 22.0.1229.59

  • Google Chrome 22.0.1229.6

  • Google Chrome 22.0.1229.60

  • Google Chrome 22.0.1229.62

  • Google Chrome 22.0.1229.63

  • Google Chrome 22.0.1229.64

  • Google Chrome 22.0.1229.65

  • Google Chrome 22.0.1229.67

  • Google Chrome 22.0.1229.7

  • Google Chrome 22.0.1229.76

  • Google Chrome 22.0.1229.78

  • Google Chrome 22.0.1229.8

  • Google Chrome 22.0.1229.9


References

CONFIRM - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html

CONFIRM - https://code.google.com/p/chromium/issues/detail?id=146254

MS - MS12-075

CERT - TA12-318A

XF - google-chrome-cve20122897(78822)

SECTRACK - 1027750

SECUNIA - 51239


Last Updated: 27 May 2016 11:00:50