製品・ソフトウェアに関する情報

JVN脆弱性詳細

複数の製品で使用される Webkit におけるサービス運用妨害 (DoS) の脆弱性

Title	複数の製品で使用される Webkit におけるサービス運用妨害 (DoS) の脆弱性
Summary	Google Chrome には、Cascading Style Sheets (CSS) のカウンタ機能を使用するドキュメントのレイアウトに関する処理に不備があるため、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (DoS) 状態となるなど、不特定の影響を受ける脆弱性が存在します。本脆弱性は Webkit における脆弱性です。 Google Chrome 以外の Webkit を利用する製品も影響を受ける可能性があります。
Possible impacts	第三者により、サービス運用妨害 (DoS) 状態にされるなど、不特定の影響を受ける可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	June 26, 2012, midnight
Registration Date	June 28, 2012, 3:23 p.m.
Last Update	Oct. 4, 2012, 4:57 p.m.

CVSS2.0 : 危険
Score	7.5
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected System

アップル

iOS 6 未満 (iPad 2 以降)

iOS 6 未満 (iPhone 3GS 以降)

iOS 6 未満 (iPod touch 第 4 世代以降)

Safari 6.0.1 未満

Google

Google Chrome 20.0.1132.43 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2012-2818	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2818
National Vulnerability Database (NVD)
2	CVE-2012-2818	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-2818

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-399	https://jvndb.jvn.jp/ja/cwe/CWE-399.html

ベンダー情報

No	Name	URL
Apple Security Updates
1	HT5502	http://support.apple.com/kb/HT5502
2	HT5503	http://support.apple.com/kb/HT5503
Apple セキュリティアップデート
3	HT5502	http://support.apple.com/kb/HT5502?viewlocale=ja_JP
4	HT5503	http://support.apple.com/kb/HT5503?viewlocale=ja_JP
Google
5	Google Chrome	http://www.google.co.jp/chrome/intl/ja/landing_ff_yt.html?hl=ja&hl=ja
6	Stable Channel Update	http://googlechromereleases.blogspot.jp/2012/06/stable-channel-update_26.html
opensuse-updates
7	openSUSE-SU-2012:0813	http://lists.opensuse.org/opensuse-updates/2012-07/msg00003.html

その他

No	Name	URL
JVN
1	JVNVU#503755	http://jvn.jp/cert/JVNVU503755/index.html
2	JVNVU#624491	http://jvn.jp/cert/JVNVU624491/index.html

Change Log

No	Changed Details	Date of change
0	[2012年06月28日] 掲載 [2012年07月26日] ベンダ情報：openSUSE (openSUSE-SU-2012:0813) を追加 [2012年10月04日] タイトル：アップル (HT5502、HT5503) の公開に伴い内容を更新概要：アップル (HT5502、HT5503) の公開に伴い内容を更新影響を受けるシステム：アップル (HT5502) の情報を追加影響を受けるシステム：アップル (HT5503) の情報を追加ベンダ情報：アップル (HT5502) を追加ベンダ情報：アップル (HT5503) を追加	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2012-2818

Summary	Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the layout of documents that use the Cascading Style Sheets (CSS) counters feature.
Publication Date	June 27, 2012, 7:18 p.m.
Registration Date	Jan. 28, 2021, 2:59 p.m.
Last Update	Nov. 21, 2024, 10:39 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:google:chrome:20.0.1132.37:::::::*
cpe:2.3:a:google:chrome:20.0.1132.16:::::::*
cpe:2.3:a:google:chrome:20.0.1132.14:::::::*
cpe:2.3:a:google:chrome:20.0.1132.22:::::::*
cpe:2.3:a:google:chrome:20.0.1132.30:::::::*
cpe:2.3:a:google:chrome:20.0.1132.26:::::::*
cpe:2.3:a:google:chrome:20.0.1132.2:::::::*
cpe:2.3:a:google:chrome:20.0.1132.11:::::::*
cpe:2.3:a:google:chrome:20.0.1132.3:::::::*
cpe:2.3:a:google:chrome:20.0.1132.25:::::::*
cpe:2.3:a:google:chrome:20.0.1132.24:::::::*
cpe:2.3:a:google:chrome:20.0.1132.41:::::::*
cpe:2.3:a:google:chrome:20.0.1132.32:::::::*
cpe:2.3:a:google:chrome:20.0.1132.38:::::::*
cpe:2.3:a:google:chrome:20.0.1132.31:::::::*
cpe:2.3:a:google:chrome:20.0.1132.8:::::::*
cpe:2.3:a:google:chrome:20.0.1132.4:::::::*
cpe:2.3:a:google:chrome:20.0.1132.17:::::::*
cpe:2.3:a:google:chrome:20.0.1132.7:::::::*
cpe:2.3:a:google:chrome:20.0.1132.18:::::::*
cpe:2.3:a:google:chrome:20.0.1132.0:::::::*
cpe:2.3:a:google:chrome::::::::		20.0.1132.42
cpe:2.3:a:google:chrome:20.0.1132.5:::::::*
cpe:2.3:a:google:chrome:20.0.1132.27:::::::*
cpe:2.3:a:google:chrome:20.0.1132.1:::::::*
cpe:2.3:a:google:chrome:20.0.1132.35:::::::*
cpe:2.3:a:google:chrome:20.0.1132.15:::::::*
cpe:2.3:a:google:chrome:20.0.1132.20:::::::*
cpe:2.3:a:google:chrome:20.0.1132.21:::::::*
cpe:2.3:a:google:chrome:20.0.1132.33:::::::*
cpe:2.3:a:google:chrome:20.0.1132.10:::::::*
cpe:2.3:a:google:chrome:20.0.1132.9:::::::*
cpe:2.3:a:google:chrome:20.0.1132.23:::::::*
cpe:2.3:a:google:chrome:20.0.1132.28:::::::*
cpe:2.3:a:google:chrome:20.0.1132.19:::::::*
cpe:2.3:a:google:chrome:20.0.1132.36:::::::*
cpe:2.3:a:google:chrome:20.0.1132.12:::::::*
cpe:2.3:a:google:chrome:20.0.1132.13:::::::*
cpe:2.3:a:google:chrome:20.0.1132.29:::::::*
cpe:2.3:a:google:chrome:20.0.1132.6:::::::*
cpe:2.3:a:google:chrome:20.0.1132.39:::::::*
cpe:2.3:a:google:chrome:20.0.1132.34:::::::*
cpe:2.3:a:google:chrome:20.0.1132.40:::::::*

Related information, measures and tools

No	URL	refsource	タグ
1	http://code.google.com/p/chromium/issues/detail?id=120944
2	http://code.google.com/p/chromium/issues/detail?id=120944
3	http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html
4	http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html
5	http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html
6	http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html
7	http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
8	http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
9	http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
10	http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
11	http://support.apple.com/kb/HT5485
12	http://support.apple.com/kb/HT5485
13	http://support.apple.com/kb/HT5502
14	http://support.apple.com/kb/HT5502
15	http://support.apple.com/kb/HT5503
16	http://support.apple.com/kb/HT5503
17	https://hermes.opensuse.org/messages/15075728
18	https://hermes.opensuse.org/messages/15075728
19	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14771
20	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14771

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-399	リソース管理の問題	https://cwe.mitre.org/data/definitions/399.html

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:google:chrome:20.0.1132.37:::::::*
cpe:2.3:a:google:chrome:20.0.1132.16:::::::*
cpe:2.3:a:google:chrome:20.0.1132.14:::::::*
cpe:2.3:a:google:chrome:20.0.1132.22:::::::*
cpe:2.3:a:google:chrome:20.0.1132.30:::::::*
cpe:2.3:a:google:chrome:20.0.1132.26:::::::*
cpe:2.3:a:google:chrome:20.0.1132.2:::::::*
cpe:2.3:a:google:chrome:20.0.1132.11:::::::*
cpe:2.3:a:google:chrome:20.0.1132.3:::::::*
cpe:2.3:a:google:chrome:20.0.1132.25:::::::*
cpe:2.3:a:google:chrome:20.0.1132.24:::::::*
cpe:2.3:a:google:chrome:20.0.1132.41:::::::*
cpe:2.3:a:google:chrome:20.0.1132.32:::::::*
cpe:2.3:a:google:chrome:20.0.1132.38:::::::*
cpe:2.3:a:google:chrome:20.0.1132.31:::::::*
cpe:2.3:a:google:chrome:20.0.1132.8:::::::*
cpe:2.3:a:google:chrome:20.0.1132.4:::::::*
cpe:2.3:a:google:chrome:20.0.1132.17:::::::*
cpe:2.3:a:google:chrome:20.0.1132.7:::::::*
cpe:2.3:a:google:chrome:20.0.1132.18:::::::*
cpe:2.3:a:google:chrome:20.0.1132.0:::::::*
cpe:2.3:a:google:chrome::::::::		20.0.1132.42
cpe:2.3:a:google:chrome:20.0.1132.5:::::::*
cpe:2.3:a:google:chrome:20.0.1132.27:::::::*
cpe:2.3:a:google:chrome:20.0.1132.1:::::::*
cpe:2.3:a:google:chrome:20.0.1132.35:::::::*
cpe:2.3:a:google:chrome:20.0.1132.15:::::::*
cpe:2.3:a:google:chrome:20.0.1132.20:::::::*
cpe:2.3:a:google:chrome:20.0.1132.21:::::::*
cpe:2.3:a:google:chrome:20.0.1132.33:::::::*
cpe:2.3:a:google:chrome:20.0.1132.10:::::::*
cpe:2.3:a:google:chrome:20.0.1132.9:::::::*
cpe:2.3:a:google:chrome:20.0.1132.23:::::::*
cpe:2.3:a:google:chrome:20.0.1132.28:::::::*
cpe:2.3:a:google:chrome:20.0.1132.19:::::::*
cpe:2.3:a:google:chrome:20.0.1132.36:::::::*
cpe:2.3:a:google:chrome:20.0.1132.12:::::::*
cpe:2.3:a:google:chrome:20.0.1132.13:::::::*
cpe:2.3:a:google:chrome:20.0.1132.29:::::::*
cpe:2.3:a:google:chrome:20.0.1132.6:::::::*
cpe:2.3:a:google:chrome:20.0.1132.39:::::::*
cpe:2.3:a:google:chrome:20.0.1132.34:::::::*
cpe:2.3:a:google:chrome:20.0.1132.40:::::::*