VULNERABILITY INTELLIGENCE

CVE-2012-2847

CVSS score4.3 MEDIUM
EPSS probability0.75%
CISA KEVNot currently listed
Published2012-08-06
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:P

Description

Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not request user confirmation before continuing a large series of downloads, which allows user-assisted remote attackers to cause a denial of service (resource consumption) via a crafted web site.

Primary references