CVE-2012-2848

Published: Aug 6, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The drag-and-drop implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows user-assisted remote attackers to bypass intended file access restrictions via a crafted web site.

Affected (27)

Products: Google: Chrome

Google

1 product

Chrome

Configuration A

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Google Chrome	Up to 21.0.1180.56

Running on/with	Platform Versions
Apple Mac Os X	All versions
Linux Linux Kernel	All versions

Configuration B

26 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Google Chrome	Up to 21.0.1180.59
Google Chrome	Version 21.0.1180.0
Google Chrome	Version 21.0.1180.1
Google Chrome	Version 21.0.1180.2
Google Chrome	Version 21.0.1180.31
Google Chrome	Version 21.0.1180.32
Google Chrome	Version 21.0.1180.33
Google Chrome	Version 21.0.1180.34
Google Chrome	Version 21.0.1180.35
Google Chrome	Version 21.0.1180.36
Google Chrome	Version 21.0.1180.37
Google Chrome	Version 21.0.1180.38
Google Chrome	Version 21.0.1180.39
Google Chrome	Version 21.0.1180.41
Google Chrome	Version 21.0.1180.46
Google Chrome	Version 21.0.1180.47
Google Chrome	Version 21.0.1180.48
Google Chrome	Version 21.0.1180.49
Google Chrome	Version 21.0.1180.50
Google Chrome	Version 21.0.1180.51
Google Chrome	Version 21.0.1180.52
Google Chrome	Version 21.0.1180.53
Google Chrome	Version 21.0.1180.54
Google Chrome	Version 21.0.1180.55
Google Chrome	Version 21.0.1180.56
Google Chrome	Version 21.0.1180.57