CVE-2012-5376 The Inter-process Communication (IPC) implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrictions and write to arbitrary files by leveraging acc...
CriticalCVSS 9.6
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Inter-process Communication (IPC) implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrictions and write to arbitrary files by leveraging access to a renderer process, a different vulnerability than CVE-2012-5112.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | < 22.0.1229.94 | 22.0.1229.94 |
References
- blog.chromium.org vendor-advisory
- code.google.com vendor-advisory
- code.google.com vendor-advisory
- googlechromereleases.blogspot.com vendor-advisory
- 86156 broken-link vdb-entry
- 50954 third-party-advisory
- google-chrome-ipc-sec-bypass(79186) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:15156 signature tool-signature vdb-entry