First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2012-5129

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Heap-based buffer overflow in the WebGL subsystem in Google Chrome OS before 23.0.1271.94 allows remote attackers to cause a denial of service (GPU process crash) or possibly have unspecified other impact via unknown vectors.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Dec 4, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-51305.0Skia, as used in Google Chrome before 23.0.1271.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecifie CVE-2012-51317.5Google Chrome before 23.0.1271.91 on Mac OS X does not properly mitigate improper rendering behavior in the Intel GPU driver, which allows r CVE-2012-51325.0Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service (application crash) via a response with chunked trans CVE-2012-51337.5Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service or possibly have unsp CVE-2012-51346.8Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome befor CVE-2012-51357.5Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service or possibly have unsp CVE-2012-51366.8Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element, which al CVE-2012-513710.0Use-after-free vulnerability in Google Chrome before 23.0.1271.95 allows remote attackers to cause a denial of service or possibly have unsp CVE-2012-513810.0Google Chrome before 23.0.1271.95 does not properly handle file paths, which has unspecified impact and attack vectors.CVE-2012-513910.0Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unsp CVE-2012-514010.0Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unsp CVE-2012-514110.0Google Chrome before 23.0.1271.97 does not properly restrict instantiation of the Chromoting client plug-in, which has unspecified impact an

CVE-2012-5129: High severity, CVSS 7.5 | Vulnix