VDB
CVE-2008-6996
CVE-2008-6996
PUBLISHED
CVSS 5 MEDIUM
Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask where to save each file before downloading" setting.
EPSS 6.42% · 93.0th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
6.42%
93.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| chrome | 0.2.149.27 |
Timeline
- Sep 3, 2008 PoC Published
- Aug 18, 2009 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 26, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
References
- 48261 vdb
- 6355 exploit
- 20080906 Google Chrome Auto download exploit .. mailing-list
- 20080906 Re: RES: Google Chrome Automatic File Download mailing-list
- 31000 vdb
- http://codereview.chromium.org/472/diff/1/2 url
- 20080903 RES: Google Chrome Automatic File Download mailing-list
- 20080903 Re: Google Chrome Automatic File Download mailing-list
- googlechrome-file-download(44904) vdb
- http://src.chromium.org/viewvc/chrome?view=rev&revision=1793 url
- https://nvd.nist.gov/vuln/detail/CVE-2008-6996 advisory
- http://www.securityfocus.com/archive/1/495942/100/0/threaded url
- http://www.securityfocus.com/archive/1/495959/100/100/threaded url
- http://www.securityfocus.com/archive/1/495987/100/0/threaded url