Buffer overflow in Google Chrome
CVE-2008-6998
Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2.149.29 might allow user-assisted remote attackers to execute arbitrary code via a link target (href attribute) with a large number of path elements, which triggers the overflow when the status bar is updated after the user hovers over the link.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v2 metric
CVSS v2 base score 9.3 (High). Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.097 (95.3th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 95th percentile — 95.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.097 · newest: 0.097 · change: 0.000
Affected products
- Google Chrome — versions 0.2.149.27
Weakness classification (CWE)
References
- exchange.xforce.ibmcloud.com/vulnerabilities/44934 (vdb-entry)
- src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/commo… (Patch)
- exchange.xforce.ibmcloud.com/vulnerabilities/45032 (vdb-entry)
- www.securityfocus.com/bid/31034 (Exploit, vdb-entry)
- googlechromereleases.blogspot.com/2008/09/beta-release-0214929.html (Vendor Advisory)
- www.exploit-db.com/exploits/6372 (exploit)
- osvdb.org/48264 (vdb-entry)
- shinnok.evonet.ro/vulns_html/chrome.html (Exploit)
- www.securityfocus.com/bid/31071 (Exploit, vdb-entry)