Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Google Chrome may crash or be exploited via web links

CVE-2012-5140 · published 13 years ago
Summary

Versions of Google Chrome older than 23.0.1271.97 can be forced to stop working, and possibly allow other unwanted actions, when they process certain web addresses. This happens because the browser incorrectly handles memory after freeing it. Updating Chrome to the latest version (or a version newer than 23.0.1271.97) resolves the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
google chrome <= 23.0.1271.96
23.0.1271.0
23.0.1271.1
23.0.1271.2
23.0.1271.3
23.0.1271.4
23.0.1271.5
23.0.1271.6
23.0.1271.7
23.0.1271.8
23.0.1271.9
23.0.1271.10
56 more version ranges
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
opensuse opensuse 12.1
12.2
cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*
Original advisory text
Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the URL loader.
Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the URL loader.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
2% chance of attack within 30 days
Type
CWE-416Use After Free
Timeline
Published12 Dec 2012
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2012-5140 · NVD
Track software like this
Free during beta