CVE

Id
37113  
CVE No.
CVE-2008-6996  
Status
Candidate  
Description
Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask where to save each file before downloading" setting.  
Phase
Assigned (20090817)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
403281 37113 CVE-2008-6996 BUGTRAQ:20080902 Google Chrome Automatic File Download  View
403282 37113 CVE-2008-6996 URL:http://www.securityfocus.com/archive/1/archive/1/495942/100/0/threaded  View
403283 37113 CVE-2008-6996 BUGTRAQ:20080903 RE: Google Chrome Automatic File Download  View
403284 37113 CVE-2008-6996 URL:http://www.securityfocus.com/archive/1/archive/1/495959/100/100/threaded  View
403285 37113 CVE-2008-6996 BUGTRAQ:20080903 RES: Google Chrome Automatic File Download  View
403286 37113 CVE-2008-6996 URL:http://www.securityfocus.com/archive/1/archive/1/495951/100/100/threaded  View
403287 37113 CVE-2008-6996 BUGTRAQ:20080903 Re: Google Chrome Automatic File Download  View
403288 37113 CVE-2008-6996 URL:http://www.securityfocus.com/archive/1/archive/1/495954/100/100/threaded  View
403289 37113 CVE-2008-6996 BUGTRAQ:20080904 Re: Google Chrome Automatic File Download  View
403290 37113 CVE-2008-6996 URL:http://www.securityfocus.com/archive/1/archive/1/495987/100/0/threaded  View
403291 37113 CVE-2008-6996 BUGTRAQ:20080906 Google Chrome Auto download exploit ..  View
403292 37113 CVE-2008-6996 URL:http://www.securityfocus.com/archive/1/496049  View
403293 37113 CVE-2008-6996 BUGTRAQ:20080906 Re: RES: Google Chrome Automatic File Download  View
403294 37113 CVE-2008-6996 URL:http://www.securityfocus.com/archive/1/archive/1/496048/100/100/threaded  View
403295 37113 CVE-2008-6996 MILW0RM:6355  View
403296 37113 CVE-2008-6996 URL:http://www.milw0rm.com/exploits/6355  View
403297 37113 CVE-2008-6996 CONFIRM:http://codereview.chromium.org/472/diff/1/2  View
403298 37113 CVE-2008-6996 CONFIRM:http://src.chromium.org/viewvc/chrome?view=rev&revision=1793  View
403299 37113 CVE-2008-6996 BID:31000  View
403300 37113 CVE-2008-6996 URL:http://www.securityfocus.com/bid/31000  View
403301 37113 CVE-2008-6996 OSVDB:48261  View
403302 37113 CVE-2008-6996 URL:http://www.osvdb.org/48261  View
403303 37113 CVE-2008-6996 XF:googlechrome-file-download(44904)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44654 JVNDB-2009-005661 PHPAuction の index.php における PHP リモートファイルインクルージョンの脆弱性 PHPAuction の index.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2008-7000 37113 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005661.html  View