IT

Tracker / CVE-2012-2848

CVE-2012-2848

Medium 4.3

The drag-and-drop implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows user-assisted remote attackers to bypass intended file access restrictions via a crafted web site.

Affected products and versions

google chrome
google chrome · … → 21.0.1180.56
google chrome · … → 21.0.1180.59

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References