CVE-2012-2865

Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote...

4.3 Medium

CVE-2012-2865 is a medium vulnerability (CVSS 4.3) in Google Chrome, published August 31, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.11%, the 66th percentile. No source names a fixed version.

Severity: 4.3 MediumCVSS 2.0, NVD
Exploit chance: 1.11%EPSS, 66th percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: No fix listedNo source names one

Description

Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.

Exploit likelihood

1.11%Down 0.1 points since Feb 4, 2022

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`chromium` openSUSE:Tumbleweed From an advisory covering 719 CVEs	before 55.0.2883.75-3.1	55.0.2883.75-3.1
`chromium` openSUSE:Tumbleweed From an advisory covering 2310 CVEs	before 113.0.5672.92-1.1	113.0.5672.92-1.1

What each source reports

NVD Score used4.3

Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.

Record: CVE-2012-2865
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE ListNo score

Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.

Record: CVE-2012-2865
Updated: 2026-11-02

EUVDEUVD-2012-2845No score

Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.

Record: EUVD-2012-2845
Updated: 2026-11-03

GitHub AdvisoriesGHSA-2pw2-g6vj-5cwhNo score

Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote...

Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.

Record: GHSA-2pw2-g6vj-5cwh
Weakness: CWE-119
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10171-1No score

chromedriver-55.0.2883.75-3.1 on GA media

These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.