[Forgot Password]
Login  Register Subscribe

23631

 
 

126941

 
 

98503

 
 

909

 
 

79321

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2008-6998

Date: (C)2009-08-19   (M)2017-10-04 


Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2.149.29 might allow user-assisted remote attackers to execute arbitrary code via a link target (href attribute) with a large number of path elements, which triggers the overflow when the status bar is updated after the user hovers over the link.

CVSS Score: 9.3Access Vector: NETWORK
Exploit Score: 8.6Access Complexity: MEDIUM
Impact Score: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE





Reference:
BID-31034
BID-31071
OSVDB-48264
EXPLOIT-DB-6372
google-chrome-href-dos(44934)
google-chrome-urlelider-bo(45032)
http://googlechromereleases.blogspot.com/2008/09/beta-release-0214929.html
http://shinnok.evonet.ro/vulns_html/chrome.html
http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/gfx/url_elider.cc?r1=1774&r2=1797&pathrev=1797

CPE    1
cpe:/a:google:chrome:0.2.149.27
CWE    1
CWE-119

© 2013 SecPod Technologies