CVE

Id
37115  
CVE No.
CVE-2008-6998  
Status
Candidate  
Description
Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2.149.29 might allow user-assisted remote attackers to execute arbitrary code via a link target (href attribute) with a large number of path elements, which triggers the overflow when the status bar is updated after the user hovers over the link.  
Phase
Assigned (20090817)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
403312 37115 CVE-2008-6998 MILW0RM:6372  View
403313 37115 CVE-2008-6998 URL:http://www.milw0rm.com/exploits/6372  View
403314 37115 CVE-2008-6998 MISC:http://shinnok.evonet.ro/vulns_html/chrome.html  View
403315 37115 CVE-2008-6998 CONFIRM:http://googlechromereleases.blogspot.com/2008/09/beta-release-0214929.html  View
403316 37115 CVE-2008-6998 CONFIRM:http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/gfx/url_elider.cc?r1=1774&r2=1797&pathrev=1797  View
403317 37115 CVE-2008-6998 BID:31034  View
403318 37115 CVE-2008-6998 URL:http://www.securityfocus.com/bid/31034  View
403319 37115 CVE-2008-6998 BID:31071  View
403320 37115 CVE-2008-6998 URL:http://www.securityfocus.com/bid/31071  View
403321 37115 CVE-2008-6998 OSVDB:48264  View
403322 37115 CVE-2008-6998 URL:http://osvdb.org/48264  View
403323 37115 CVE-2008-6998 XF:google-chrome-href-dos(44934)  View
403324 37115 CVE-2008-6998 URL:http://xforce.iss.net/xforce/xfdb/44934  View
403325 37115 CVE-2008-6998 XF:google-chrome-urlelider-bo(45032)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43325 JVNDB-2009-004332 PHP におけるアクセス制限を回避される脆弱性 PHP には、特定関数の (a) open_basedir および (b) safe_mode_exec_dir 制限を実行しないため、アクセス制限を回避される、およびディレクトリの外のプログラムを呼び出される脆弱性が存在します。 CVE-2008-7002 37115 7.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004332.html  View