Upstream information
Description
Google Chrome before 20.0.1132.43 does not properly set array values, which allows remote attackers to cause a denial of service (incorrect pointer use) or possibly have unspecified other impact via unknown vectors.SUSE information
Overall state of this security issue: Does not affect SUSE products
This issue is currently rated as having important severity.
| CVSS detail | National Vulnerability Database | 
|---|---|
| Base Score | 7.5 | 
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P | 
| Access Vector | Network | 
| Access Complexity | Low | 
| Authentication | None | 
| Confidentiality Impact | Partial | 
| Integrity Impact | Partial | 
| Availability Impact | Partial | 
SUSE Security Advisories:
- openSUSE-SU-2012:0813-1
 
List of released packages
| Product(s) | Fixed package version(s) | References | 
|---|---|---|
| openSUSE Leap 15.0 | 
  |  Patchnames:  openSUSE Leap 15.0 GA chromium-66.0.3359.170-lp150.1.1  | 
| openSUSE Tumbleweed | 
  |  Patchnames:  openSUSE-Tumbleweed-2024-10171 openSUSE-Tumbleweed-2024-12948  | 
SUSE Timeline for this CVE
CVE page created: Fri Jun 28 12:49:24 2013CVE page last modified: Sat Nov 1 19:47:26 2025