CVE-2012-2849

Published: Aug 6, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Off-by-one error in the GIF decoder in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image.

Affected (27)

Products: Google: Chrome

Google

1 product

Chrome

Configuration A

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Google Chrome	Up to 21.0.1180.56

Running on/with	Platform Versions
Apple Mac Os X	All versions
Linux Linux Kernel	All versions

Configuration B

26 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Google Chrome	Up to 21.0.1180.59
Google Chrome	Version 21.0.1180.0
Google Chrome	Version 21.0.1180.1
Google Chrome	Version 21.0.1180.2
Google Chrome	Version 21.0.1180.31
Google Chrome	Version 21.0.1180.32
Google Chrome	Version 21.0.1180.33
Google Chrome	Version 21.0.1180.34
Google Chrome	Version 21.0.1180.35
Google Chrome	Version 21.0.1180.36
Google Chrome	Version 21.0.1180.37
Google Chrome	Version 21.0.1180.38
Google Chrome	Version 21.0.1180.39
Google Chrome	Version 21.0.1180.41
Google Chrome	Version 21.0.1180.46
Google Chrome	Version 21.0.1180.47
Google Chrome	Version 21.0.1180.48
Google Chrome	Version 21.0.1180.49
Google Chrome	Version 21.0.1180.50
Google Chrome	Version 21.0.1180.51
Google Chrome	Version 21.0.1180.52
Google Chrome	Version 21.0.1180.53
Google Chrome	Version 21.0.1180.54
Google Chrome	Version 21.0.1180.55
Google Chrome	Version 21.0.1180.56
Google Chrome	Version 21.0.1180.57