CVE-2008-6994
- State
- Published
- Severity
- Not scored
- Published
- Aug 18, 2009
- Updated
- Aug 7, 2024
- Reserved
- Aug 17, 2009
Description
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://www.infoworld.com/d/security-central/critical-vulnerability-patched-in-googles-chrome-599
- google-chrome-filename-dos(44939)vdb-entry
- 20080905 Google Chrome 0.2.149.27 'SaveAs' Function Buffer Overflow Vulnerabilitymailing-list
- 6367exploit
- http://security.bkis.vn/?p=119
- http://code.google.com/p/chromium/issues/detail?id=1414
- 31031vdb-entry
- 6365exploit
- http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/win_util.cc?r1=1757&r2=1766&pathrev=1766
- 48259vdb-entry
- googlechrome-saveas-bo(44935)vdb-entry
- 31029vdb-entry
- 1020823vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.