Back to search
CVE-2008-6994
Published: Aug 18, 2009
Modified: Aug 7, 2024
PUBLISHED
Description
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
google-chrome-filename-dos(44939)
vdb-entry
x_refsource_XF
20080905 Google Chrome 0.2.149.27 'SaveAs' Function Buffer Overflow Vulnerability
mailing-list
x_refsource_BUGTRAQ
6367
exploit
x_refsource_EXPLOIT-DB
http://security.bkis.vn/?p=119
x_refsource_MISC
http://code.google.com/p/chromium/issues/detail?id=1414
x_refsource_CONFIRM
31031
vdb-entry
x_refsource_BID
6365
exploit
x_refsource_EXPLOIT-DB
48259
vdb-entry
x_refsource_OSVDB
googlechrome-saveas-bo(44935)
vdb-entry
x_refsource_XF
31029
vdb-entry
x_refsource_BID
1020823
vdb-entry
x_refsource_SECTRACK
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now