CVE-2012-2807
Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other...
6.8 MediumFix available
Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Exploit likelihood
1.57%Down 1.8 points since Feb 4, 2022
What each source reports
NVD Score used
Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
- Record
CVE-2012-2807- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
- Record
CVE-2012-2807- Updated
- 2026-11-02
EUVDEUVD-2012-2787 No score
Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
- Record
EUVD-2012-2787- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-52m3-crxv-6mg3 No score
Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other...
Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
- Record
GHSA-52m3-crxv-6mg3- Updated
- 2026-11-02
OSV No score
Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
- Record
CVE-2012-2807- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2807 No score
Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
- Record
DEBIAN-CVE-2012-2807- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10171-1 No score
chromedriver-55.0.2883.75-3.1 on GA media
These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10171-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libxml2Debian:12 |
before 2.8.0+dfsg1-5 | 2.8.0+dfsg1-5 |
libxml2Debian:13 |
before 2.8.0+dfsg1-5 | 2.8.0+dfsg1-5 |
libxml2Debian:14 |
before 2.8.0+dfsg1-5 | 2.8.0+dfsg1-5 |
libxml2Debian:6.0 |
before 2.7.8.dfsg-2+squeeze5, plus listed versions 2.7.8.dfsg-22.7.8.dfsg-2+squeeze12.7.8.dfsg-2+squeeze22.7.8.dfsg-2+squeeze32.7.8.dfsg-2+squeeze4 |
2.7.8.dfsg-2+squeeze5 |
libxml2Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.6.26-2.1.15.el5_8.5 | 0:2.6.26-2.1.15.el5_8.5 |
libxml2-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.6.26-2.1.15.el5_8.5 | 0:2.6.26-2.1.15.el5_8.5 |
libxml2-pythonRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.6.26-2.1.15.el5_8.5 | 0:2.6.26-2.1.15.el5_8.5 |
libxml2Red Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:2.6.26-2.1.15.el5_8.5 | 0:2.6.26-2.1.15.el5_8.5 |
libxml2-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:2.6.26-2.1.15.el5_8.5 | 0:2.6.26-2.1.15.el5_8.5 |
libxml2-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:2.6.26-2.1.15.el5_8.5 | 0:2.6.26-2.1.15.el5_8.5 |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libxml2Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.26-2.1.15.el5_8.5 | 0:2.6.26-2.1.15.el5_8.5 |
libxml2-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.26-2.1.15.el5_8.5 | 0:2.6.26-2.1.15.el5_8.5 |
libxml2-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.26-2.1.15.el5_8.5 | 0:2.6.26-2.1.15.el5_8.5 |
libxml2-pythonRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.6.26-2.1.15.el5_8.5 | 0:2.6.26-2.1.15.el5_8.5 |
libxml2Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2-pythonRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2-develRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2-staticRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2-pythonRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2-develRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2-staticRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2-develRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2-pythonRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2-staticRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2-develRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2-pythonRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
libxml2-staticRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:2.7.6-8.el6_3.3 | 0:2.7.6-8.el6_3.3 |
chromiumopenSUSE:Tumbleweed From an advisory covering 719 CVEs |
before 55.0.2883.75-3.1 | 55.0.2883.75-3.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2807 is a medium vulnerability (CVSS 6.8) in Google Chrome, published June 27, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.57%, the 75th percentile. Fixed in libxml2 2.8.0+dfsg1-5.
References
lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
hermes.opensuse.org/messages/15075728
lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html
support.apple.com/kb/HT6001
googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html
secunia.com/advisories/50658
Show 194 moreShow less
securityfocus.com/bid/54718
ubuntu.com/usn/USN-1587-1
debian.org/security/2012/dsa-2521
mandriva.com/security/advisories?name=MDVSA-2012:126
code.google.com/p/chromium/issues/detail?id=129930
nvd.nist.gov/vuln/detail/CVE-2012-2807
github.com/advisories/GHSA-52m3-crxv-6mg3
security-tracker.debian.org/tracker/CVE-2012-2807
access.redhat.com/errata/RHSA-2012:1288
bugzilla.redhat.com/show_bug.cgi?id=822109
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1288.json
cve.org/CVERecord?id=CVE-2011-3102
suse.com/security/cve/CVE-2011-3015
This page doesn't list everything
Left out here: 2,163 references. The JSON record has them.