VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 15, 2012· Updated Apr 29, 2026

CVE-2012-5851

CVE-2012-5851

Description

html/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chrome through 22 and Safari 5.1.7, does not consider all possible output contexts of reflected data, which makes it easier for remote attackers to bypass a cross-site scripting (XSS) protection mechanism via a crafted string, aka rdar problem 12019108.

Affected products

62
  • Apple Inc./Safari
    cpe:2.3:a:apple:safari:5.1.7:*:*:*:*:*:*:*
  • Apple Inc./Webkit
    cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*
  • Google/Chrome60 versions
    cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*+ 59 more
    • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <=22.0.1229.96
    • cpe:2.3:a:google:chrome:22.0.1229.0:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.1:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.10:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.11:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.12:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.14:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.16:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.17:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.18:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.2:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.20:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.21:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.22:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.23:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.24:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.25:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.26:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.27:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.28:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.29:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.3:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.31:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.32:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.33:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.35:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.36:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.37:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.39:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.4:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.48:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.49:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.50:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.51:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.52:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.53:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.54:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.55:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.56:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.57:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.58:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.59:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.6:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.60:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.62:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.63:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.64:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.65:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.67:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.7:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.76:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.78:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.79:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.8:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.89:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.9:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.91:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.92:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.94:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:22.0.1229.95:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.