Candidate: CVE-2012-5109 PublicDate: 2012-10-09 11:13:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5109 https://code.google.com/p/chromium/issues/detail?id=148692 http://googlechromereleases.blogspot.com/2012/10/stable-channel-update.html Description: The International Components for Unicode (ICU) functionality in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to a regular expression. Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: Patches_chromium-browser: upstream_chromium-browser: released (22.0.1229.92) hardy_chromium-browser: DNE lucid_chromium-browser: released (3.0.1271.97-0ubuntu0.10.04.1) natty_chromium-browser: ignored (reached end-of-life) oneiric_chromium-browser: released (3.0.1271.97-0ubuntu0.11.10.1) precise_chromium-browser: released (3.0.1271.97-0ubuntu0.12.04.1) quantal_chromium-browser: released (3.0.1271.97-0ubuntu0.12.10.1) raring_chromium-browser: not-affected (22.0.1229.94~r161065-0ubuntu1) devel_chromium-browser: not-affected (22.0.1229.94~r161065-0ubuntu1) Patches_icu: upstream: http://bugs.icu-project.org/trac/changeset/29356 upstream_icu: needs-triage hardy_icu: ignored (reached end-of-life) lucid_icu: ignored (reached end-of-life) natty_icu: ignored (reached end-of-life) oneiric_icu: ignored (reached end-of-life) precise_icu: not-affected (4.8.1.1-3) quantal_icu: not-affected (4.8.1.1-8) raring_icu: not-affected (4.8.1.1-12) devel_icu: not-affected (4.8.1.1-12)