CVE-2008-6994 — Vulnetix

CVE-2008-6994 PUBLISHED CVSS 9.300000190734863 CRITICAL

Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.

EPSS 19.30% · 95.5th percentile

Risk Scores

CVSS 2.0

9.300000190734863

EPSS Score

19.30%

95.5th percentile

Affected Products

Vendor	Product	Versions
n/a	n/a	n/a
google	chrome	0.2.149.27

Exploit Intelligence

CIRCL confirmed: CVE-2008-6994 (circl-sighting)
google-chrome-filename-dos(44939) (circl)
googlechrome-saveas-bo(44935) (circl)
48259 (circl)
http://code.google.com/p/chromium/issues/detail?id=1414 (circl)
20080905 Google Chrome 0.2.149.27 'SaveAs' Function Buffer Overflow Vulnerability (circl)
http://securitytracker.com/id?1020823 (vulncheck-nvd)
http://www.securityfocus.com/bid/31031 (vulncheck-nvd)
http://www.securityfocus.com/bid/31029 (vulncheck-nvd)
http://www.infoworld.com/d/security-central/critical-vulnerability-patched-in-googles-chrome-599 (vulncheck-nvd)

…and 4 more exploits

Timeline

Sep 5, 2008 PoC Published
Aug 18, 2009 CVE Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
May 20, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Oct 26, 2022 EPSS Score
Dec 18, 2022 EPSS Score
Feb 9, 2023 EPSS Score
Apr 3, 2023 EPSS Score
Apr 11, 2023 EPSS Score
May 25, 2023 EPSS Score

References

Open in Interactive Console →