CVE-2012-2825
The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a...
5.0 MediumFix available
The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.
Exploit likelihood
2.20%Unchanged since Feb 4, 2022
What each source reports
NVD Score used
The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.
- Record
CVE-2012-2825- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.
- Record
CVE-2012-2825- Updated
- 2026-11-02
EUVDEUVD-2012-2805 No score
The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.
- Record
EUVD-2012-2805- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fj65-38p4-j4mp No score
The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a...
The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.
- Record
GHSA-fj65-38p4-j4mp- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.
- Record
CVE-2012-2825- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2825 No score
The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.
- Record
DEBIAN-CVE-2012-2825- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10171-1 No score
chromedriver-55.0.2883.75-3.1 on GA media
These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10171-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libxsltDebian:12 |
before 1.1.26-13 | 1.1.26-13 |
libxsltDebian:13 |
before 1.1.26-13 | 1.1.26-13 |
libxsltDebian:14 |
before 1.1.26-13 | 1.1.26-13 |
libxsltRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:1.1.17-4.el5_8.3 | 0:1.1.17-4.el5_8.3 |
libxslt-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:1.1.17-4.el5_8.3 | 0:1.1.17-4.el5_8.3 |
libxslt-pythonRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:1.1.17-4.el5_8.3 | 0:1.1.17-4.el5_8.3 |
libxsltRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:1.1.17-4.el5_8.3 | 0:1.1.17-4.el5_8.3 |
libxslt-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:1.1.17-4.el5_8.3 | 0:1.1.17-4.el5_8.3 |
libxslt-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:1.1.17-4.el5_8.3 | 0:1.1.17-4.el5_8.3 |
libxsltRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:1.1.17-4.el5_8.3 | 0:1.1.17-4.el5_8.3 |
Show 21 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libxslt-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:1.1.17-4.el5_8.3 | 0:1.1.17-4.el5_8.3 |
libxslt-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:1.1.17-4.el5_8.3 | 0:1.1.17-4.el5_8.3 |
libxslt-pythonRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:1.1.17-4.el5_8.3 | 0:1.1.17-4.el5_8.3 |
libxsltRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:1.1.26-2.el6_3.1 | 0:1.1.26-2.el6_3.1 |
libxslt-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:1.1.26-2.el6_3.1 | 0:1.1.26-2.el6_3.1 |
libxslt-develRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:1.1.26-2.el6_3.1 | 0:1.1.26-2.el6_3.1 |
libxslt-pythonRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:1.1.26-2.el6_3.1 | 0:1.1.26-2.el6_3.1 |
libxsltRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:1.1.26-2.el6_3.1 | 0:1.1.26-2.el6_3.1 |
libxslt-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:1.1.26-2.el6_3.1 | 0:1.1.26-2.el6_3.1 |
libxslt-develRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:1.1.26-2.el6_3.1 | 0:1.1.26-2.el6_3.1 |
libxslt-pythonRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:1.1.26-2.el6_3.1 | 0:1.1.26-2.el6_3.1 |
libxsltRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:1.1.26-2.el6_3.1 | 0:1.1.26-2.el6_3.1 |
libxslt-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:1.1.26-2.el6_3.1 | 0:1.1.26-2.el6_3.1 |
libxslt-develRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:1.1.26-2.el6_3.1 | 0:1.1.26-2.el6_3.1 |
libxslt-pythonRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:1.1.26-2.el6_3.1 | 0:1.1.26-2.el6_3.1 |
libxsltRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:1.1.26-2.el6_3.1 | 0:1.1.26-2.el6_3.1 |
libxslt-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:1.1.26-2.el6_3.1 | 0:1.1.26-2.el6_3.1 |
libxslt-develRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:1.1.26-2.el6_3.1 | 0:1.1.26-2.el6_3.1 |
libxslt-pythonRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:1.1.26-2.el6_3.1 | 0:1.1.26-2.el6_3.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 719 CVEs |
before 55.0.2883.75-3.1 | 55.0.2883.75-3.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2825 is a medium vulnerability (CVSS 5.0) in Google Chrome, published June 27, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.20%, the 82nd percentile. Fixed in libxslt 1.1.26-13.
References
code.google.com/p/chromium/issues/detail?id=127417
lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
hermes.opensuse.org/messages/15075728
suse.com/support/update/announcement/2013/suse-su-20131654-1.html
support.apple.com/kb/HT6001
googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html
Show 194 moreShow less
secunia.com/advisories/54886
nvd.nist.gov/vuln/detail/CVE-2012-2825
github.com/advisories/GHSA-fj65-38p4-j4mp
security-tracker.debian.org/tracker/CVE-2012-2825
access.redhat.com/errata/RHSA-2012:1265
bugzilla.redhat.com/show_bug.cgi?id=684386
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1265.json
cve.org/CVERecord?id=CVE-2011-1202
This page doesn't list everything
Left out here: 2,171 references. The JSON record has them.