製品・ソフトウェアに関する情報

JVN脆弱性詳細

複数の製品で使用される WebKit における任意のコードを実行される脆弱性

タイトル	複数の製品で使用される WebKit における任意のコードを実行される脆弱性
概要	Google Chrome で使用される WebKit の SVG 実装には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。本脆弱性は Webkit における脆弱性です。 Google Chrome 以外の Webkit を利用する製品も影響を受ける可能性があります。
想定される影響	第三者により、任意のコードを実行される可能性があります。
対策	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
公表日	2012年10月10日0:00
登録日	2012年10月15日14:23
最終更新日	2013年5月20日14:20

CVSS2.0 : 危険
スコア	10
ベクター	AV:N/AC:L/Au:N/C:C/I:C/A:C

影響を受けるシステム

アップル

iOS 6.0.1 未満 (iPad 2 以降)

iOS 6.0.1 未満 (iPhone 3GS 以降)

iOS 6.0.1 未満 (iPod touch 第 4 世代以降)

iTunes 11.0.3 未満 (Windows)

Safari 6.0.2 未満

Google

Google Chrome 22.0.1229.94 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	名前	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2012-5112	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5112
National Vulnerability Database (NVD)
2	CVE-2012-5112	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-5112

CWE (共通脆弱性タイプ一覧)

No	名前	URL
JVNDB
1	CWE-399	https://jvndb.jvn.jp/ja/cwe/CWE-399.html

ベンダー情報

No	名前	URL
Apple Mailing Lists
1	APPLE-SA-2012-11-01-1	http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.html
2	APPLE-SA-2012-11-01-2	http://lists.apple.com/archives/security-announce/2012/Nov/msg00001.html
3	APPLE-SA-2013-05-16-1	http://lists.apple.com/archives/security-announce/2013/May/msg00000.html
Apple Security Updates
4	HT5567	http://support.apple.com/kb/HT5567
5	HT5568	http://support.apple.com/kb/HT5568
6	HT5766	http://support.apple.com/kb/HT5766
Apple セキュリティアップデート
7	HT5567	http://support.apple.com/kb/HT5567?viewlocale=ja_JP
8	HT5568	http://support.apple.com/kb/HT5568?viewlocale=ja_JP
9	HT5766	http://support.apple.com/kb/HT5766?viewlocale=ja_JP
Google
10	Google Chrome	http://www.google.co.jp/chrome/intl/ja/landing_ff_yt.html?hl=ja&hl=ja
11	Pwnium 2: results and wrap-up	http://blog.chromium.org/2012/10/pwnium-2-results-and-wrap-up_10.html
12	Stable Channel Update	http://googlechromereleases.blogspot.jp/2012/10/stable-channel-update_6105.html

その他

No	名前	URL
JVN
1	JVNVU#91609947	http://jvn.jp/cert/JVNVU91609947/
2	JVNVU#92876220	http://jvn.jp/cert/JVNVU92876220/
3	JVNVU#98133803	http://jvn.jp/cert/JVNVU98133803/

変更履歴

No	変更内容	変更日
0	[2012年10月15日] 掲載 [2012年11月15日] タイトル：アップル (HT5567、HT5568) の公開に伴い内容を更新概要：アップル (HT5567、HT5568) の公開に伴い内容を更新影響を受けるシステム：アップル (HT5567) の情報を追加影響を受けるシステム：アップル (HT5568) の情報を追加ベンダ情報：アップル (APPLE-SA-2012-11-01-1) を追加ベンダ情報：アップル (APPLE-SA-2012-11-01-2) を追加ベンダ情報：アップル (HT5567) を追加ベンダ情報：アップル (HT5568) を追加 [2013年05月20日] 影響を受けるシステム：アップル (HT5766) の情報を追加ベンダ情報：アップル (HT5766) を追加ベンダ情報：アップル (APPLE-SA-2013-05-16-1) を追加	2018年2月17日10:37

NVD脆弱性情報

CVE-2012-5112

概要	Use-after-free vulnerability in the SVG implementation in WebKit, as used in Google Chrome before 22.0.1229.94, allows remote attackers to execute arbitrary code via unspecified vectors.
公表日	2012年10月11日19:51
登録日	2021年1月28日15:04
最終更新日	2024年11月21日10:44

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:google:chrome:22.0.1229.23:::::::*
cpe:2.3:a:google:chrome:22.0.1229.63:::::::*
cpe:2.3:a:google:chrome:22.0.1229.18:::::::*
cpe:2.3:a:google:chrome:22.0.1229.33:::::::*
cpe:2.3:a:google:chrome:22.0.1229.9:::::::*
cpe:2.3:a:google:chrome:22.0.1229.57:::::::*
cpe:2.3:a:google:chrome:22.0.1229.32:::::::*
cpe:2.3:a:google:chrome:22.0.1229.54:::::::*
cpe:2.3:a:google:chrome:22.0.1229.16:::::::*
cpe:2.3:a:google:chrome:22.0.1229.4:::::::*
cpe:2.3:a:google:chrome:22.0.1229.21:::::::*
cpe:2.3:a:google:chrome:22.0.1229.78:::::::*
cpe:2.3:a:google:chrome:22.0.1229.12:::::::*
cpe:2.3:a:google:chrome:22.0.1229.31:::::::*
cpe:2.3:a:google:chrome:22.0.1229.89:::::::*
cpe:2.3:a:google:chrome:22.0.1229.10:::::::*
cpe:2.3:a:google:chrome:22.0.1229.2:::::::*
cpe:2.3:a:google:chrome:22.0.1229.22:::::::*
cpe:2.3:a:google:chrome:22.0.1229.35:::::::*
cpe:2.3:a:google:chrome:22.0.1229.50:::::::*
cpe:2.3:a:google:chrome:22.0.1229.36:::::::*
cpe:2.3:a:google:chrome:22.0.1229.60:::::::*
cpe:2.3:a:google:chrome:22.0.1229.62:::::::*
cpe:2.3:a:google:chrome:22.0.1229.25:::::::*
cpe:2.3:a:google:chrome:22.0.1229.51:::::::*
cpe:2.3:a:google:chrome:22.0.1229.0:::::::*
cpe:2.3:a:google:chrome:22.0.1229.1:::::::*
cpe:2.3:a:google:chrome:22.0.1229.7:::::::*
cpe:2.3:a:google:chrome::::::::		22.0.1229.92
cpe:2.3:a:google:chrome:22.0.1229.17:::::::*
cpe:2.3:a:google:chrome:22.0.1229.20:::::::*
cpe:2.3:a:google:chrome:22.0.1229.26:::::::*
cpe:2.3:a:google:chrome:22.0.1229.65:::::::*
cpe:2.3:a:google:chrome:22.0.1229.8:::::::*
cpe:2.3:a:google:chrome:22.0.1229.59:::::::*
cpe:2.3:a:google:chrome:22.0.1229.37:::::::*
cpe:2.3:a:google:chrome:22.0.1229.52:::::::*
cpe:2.3:a:google:chrome:22.0.1229.49:::::::*
cpe:2.3:a:google:chrome:22.0.1229.55:::::::*
cpe:2.3:a:google:chrome:22.0.1229.64:::::::*
cpe:2.3:a:google:chrome:22.0.1229.27:::::::*
cpe:2.3:a:google:chrome:22.0.1229.28:::::::*
cpe:2.3:a:google:chrome:22.0.1229.76:::::::*
cpe:2.3:a:google:chrome:22.0.1229.56:::::::*
cpe:2.3:a:google:chrome:22.0.1229.48:::::::*
cpe:2.3:a:google:chrome:22.0.1229.67:::::::*
cpe:2.3:a:google:chrome:22.0.1229.29:::::::*
cpe:2.3:a:google:chrome:22.0.1229.14:::::::*
cpe:2.3:a:google:chrome:22.0.1229.79:::::::*
cpe:2.3:a:google:chrome:22.0.1229.11:::::::*
cpe:2.3:a:google:chrome:22.0.1229.6:::::::*
cpe:2.3:a:google:chrome:22.0.1229.24:::::::*
cpe:2.3:a:google:chrome:22.0.1229.3:::::::*
cpe:2.3:a:google:chrome:22.0.1229.58:::::::*
cpe:2.3:a:google:chrome:22.0.1229.39:::::::*
cpe:2.3:a:google:chrome:22.0.1229.53:::::::*
cpe:2.3:a:google:chrome:22.0.1229.91:::::::*

構成2		以上	以下	より上	未満
cpe:2.3:o:apple:iphone_os:6.0:::::::*

構成1	以上	以下	より上	未満
cpe:2.3:a:google:chrome:22.0.1229.23:::::::*
cpe:2.3:a:google:chrome:22.0.1229.63:::::::*
cpe:2.3:a:google:chrome:22.0.1229.18:::::::*
cpe:2.3:a:google:chrome:22.0.1229.33:::::::*
cpe:2.3:a:google:chrome:22.0.1229.9:::::::*
cpe:2.3:a:google:chrome:22.0.1229.57:::::::*
cpe:2.3:a:google:chrome:22.0.1229.32:::::::*
cpe:2.3:a:google:chrome:22.0.1229.54:::::::*
cpe:2.3:a:google:chrome:22.0.1229.16:::::::*
cpe:2.3:a:google:chrome:22.0.1229.4:::::::*
cpe:2.3:a:google:chrome:22.0.1229.21:::::::*
cpe:2.3:a:google:chrome:22.0.1229.78:::::::*
cpe:2.3:a:google:chrome:22.0.1229.12:::::::*
cpe:2.3:a:google:chrome:22.0.1229.31:::::::*
cpe:2.3:a:google:chrome:22.0.1229.89:::::::*
cpe:2.3:a:google:chrome:22.0.1229.10:::::::*
cpe:2.3:a:google:chrome:22.0.1229.2:::::::*
cpe:2.3:a:google:chrome:22.0.1229.22:::::::*
cpe:2.3:a:google:chrome:22.0.1229.35:::::::*
cpe:2.3:a:google:chrome:22.0.1229.50:::::::*
cpe:2.3:a:google:chrome:22.0.1229.36:::::::*
cpe:2.3:a:google:chrome:22.0.1229.60:::::::*
cpe:2.3:a:google:chrome:22.0.1229.62:::::::*
cpe:2.3:a:google:chrome:22.0.1229.25:::::::*
cpe:2.3:a:google:chrome:22.0.1229.51:::::::*
cpe:2.3:a:google:chrome:22.0.1229.0:::::::*
cpe:2.3:a:google:chrome:22.0.1229.1:::::::*
cpe:2.3:a:google:chrome:22.0.1229.7:::::::*
cpe:2.3:a:google:chrome::::::::		22.0.1229.92
cpe:2.3:a:google:chrome:22.0.1229.17:::::::*
cpe:2.3:a:google:chrome:22.0.1229.20:::::::*
cpe:2.3:a:google:chrome:22.0.1229.26:::::::*
cpe:2.3:a:google:chrome:22.0.1229.65:::::::*
cpe:2.3:a:google:chrome:22.0.1229.8:::::::*
cpe:2.3:a:google:chrome:22.0.1229.59:::::::*
cpe:2.3:a:google:chrome:22.0.1229.37:::::::*
cpe:2.3:a:google:chrome:22.0.1229.52:::::::*
cpe:2.3:a:google:chrome:22.0.1229.49:::::::*
cpe:2.3:a:google:chrome:22.0.1229.55:::::::*
cpe:2.3:a:google:chrome:22.0.1229.64:::::::*
cpe:2.3:a:google:chrome:22.0.1229.27:::::::*
cpe:2.3:a:google:chrome:22.0.1229.28:::::::*
cpe:2.3:a:google:chrome:22.0.1229.76:::::::*
cpe:2.3:a:google:chrome:22.0.1229.56:::::::*
cpe:2.3:a:google:chrome:22.0.1229.48:::::::*
cpe:2.3:a:google:chrome:22.0.1229.67:::::::*
cpe:2.3:a:google:chrome:22.0.1229.29:::::::*
cpe:2.3:a:google:chrome:22.0.1229.14:::::::*
cpe:2.3:a:google:chrome:22.0.1229.79:::::::*
cpe:2.3:a:google:chrome:22.0.1229.11:::::::*
cpe:2.3:a:google:chrome:22.0.1229.6:::::::*
cpe:2.3:a:google:chrome:22.0.1229.24:::::::*
cpe:2.3:a:google:chrome:22.0.1229.3:::::::*
cpe:2.3:a:google:chrome:22.0.1229.58:::::::*
cpe:2.3:a:google:chrome:22.0.1229.39:::::::*
cpe:2.3:a:google:chrome:22.0.1229.53:::::::*
cpe:2.3:a:google:chrome:22.0.1229.91:::::::*

No	URL	refsource	タグ
1	http://archives.neohapsis.com/archives/bugtraq/2012-11/0012.html
2	http://archives.neohapsis.com/archives/bugtraq/2012-11/0012.html
3	http://archives.neohapsis.com/archives/bugtraq/2012-11/0013.html
4	http://archives.neohapsis.com/archives/bugtraq/2012-11/0013.html
5	http://blog.chromium.org/2012/10/pwnium-2-results-and-wrap-up_10.html
6	http://blog.chromium.org/2012/10/pwnium-2-results-and-wrap-up_10.html
7	http://code.google.com/p/chromium/issues/detail?id=154983
8	http://code.google.com/p/chromium/issues/detail?id=154983
9	http://code.google.com/p/chromium/issues/detail?id=154987
10	http://code.google.com/p/chromium/issues/detail?id=154987
11	http://googlechromereleases.blogspot.com/2012/10/stable-channel-update_6105.html
12	http://googlechromereleases.blogspot.com/2012/10/stable-channel-update_6105.html
13	http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.html
14	http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.html
15	http://lists.apple.com/archives/security-announce/2012/Nov/msg00001.html
16	http://lists.apple.com/archives/security-announce/2012/Nov/msg00001.html
17	http://osvdb.org/86149
18	http://osvdb.org/86149
19	http://secunia.com/advisories/50954
20	http://secunia.com/advisories/50954
21	http://support.apple.com/kb/HT5567
22	http://support.apple.com/kb/HT5567
23	http://support.apple.com/kb/HT5568
24	http://support.apple.com/kb/HT5568
25	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15523
26	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15523