CVE-2012-1846 Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a sandboxed process, as demonstrated by VUPEN during a Pwn2Own competit...
HighCVSS 10.0
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a sandboxed process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012. NOTE: the primary affected product may be clarified later; it was not identified by the researcher, who reportedly stated "it really doesn't matter if it's third-party code."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | <= 17.0.963.66 | No fix listed |
References
- pwn2own.zerodayinitiative.com not-applicable
- twitter.com broken-link
- www.forbes.com press-media-coverage
- www.zdnet.com press-media-coverage
- chrome-sandbox-security-bypass(74324) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:14940 signature third-party-advisory vdb-entry