CVE-2008-6996
- State
- Published
- Severity
- Not scored
- Published
- Aug 18, 2009
- Updated
- Aug 7, 2024
- Reserved
- Aug 17, 2009
Description
Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask where to save each file before downloading" setting.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 31000vdb-entry
- 20080904 Re: Google Chrome Automatic File Downloadmailing-list
- http://codereview.chromium.org/472/diff/1/2
- 20080902 Google Chrome Automatic File Downloadmailing-list
- 20080903 RES: Google Chrome Automatic File Downloadmailing-list
- 20080903 RE: Google Chrome Automatic File Downloadmailing-list
- 48261vdb-entry
- 20080903 Re: Google Chrome Automatic File Downloadmailing-list
- 6355exploit
- 20080906 Google Chrome Auto download exploit ..mailing-list
- googlechrome-file-download(44904)vdb-entry
- http://src.chromium.org/viewvc/chrome?view=rev&revision=1793
- 20080906 Re: RES: Google Chrome Automatic File Downloadmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.