QwikSec

Security Database

CVE

CWE

Training

CVE-2008-6998

Published: Aug 18, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2.149.29 might allow user-assisted remote attackers to execute arbitrary code via a link target (href attribute) with a large number of path elements, which triggers the overflow when the status bar is updated after the user hovers over the link.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

google-chrome-href-dos(44934)

vdb-entry

x_refsource_XF

http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/gfx/url_elider.cc?r1=1774&r2=1797&pathrev=1797

x_refsource_CONFIRM

google-chrome-urlelider-bo(45032)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_BID

http://googlechromereleases.blogspot.com/2008/09/beta-release-0214929.html

x_refsource_CONFIRM

exploit

x_refsource_EXPLOIT-DB

vdb-entry

x_refsource_OSVDB

http://shinnok.evonet.ro/vulns_html/chrome.html

x_refsource_MISC

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.