Improper input validation in Google Chrome

CVE-2009-3931

Incomplete blacklist vulnerability in browser/download/download_exe.cc in Google Chrome before 3.0.195.32 allows remote attackers to force the download of certain dangerous files via a "Content-Disposition: attachment" designation, as demonstrated by (1) .mht and (2) .mhtml files, which are automatically executed by Internet Explorer 6; (3) .svg files, which are automatically executed by Safari; (4) .xml files; (5) .htt files; (6) .xsl files; (7) .xslt files; and (8) image files that are forbidden by the victim's site policy.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.023 (81.1th percentile) — read the EPSS interpretation.

Affected products

  • Google Chrome — versions 0.2.149.27, 0.2.149.29, 0.2.149.30
  • N/a — versions n/a

Weakness classification (CWE)

References