NVD

Id
6725  
Name
CVE-2008-6994  
Description
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2009-08-19  
Modified Date
2009-09-01  
Seq
2008-6994  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
38501 6725 CVE-2008-6994 http://code.google.com/p/chromium/issues/detail?id=1414  View
38502 6725 CVE-2008-6994 http://security.bkis.vn/?p=119  View
38503 6725 CVE-2008-6994 1020823  View
38504 6725 CVE-2008-6994 http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/win_util.cc?r1=1757&r2=1766&pathrev=1766  View
38505 6725 CVE-2008-6994 http://www.infoworld.com/d/security-central/critical-vulnerability-patched-in-googles-chrome-599  View
38506 6725 CVE-2008-6994 6365  View
38507 6725 CVE-2008-6994 6367  View
38508 6725 CVE-2008-6994 20080905 Google Chrome 0.2.149.27 "SaveAs" Function Buffer Overflow Vulnerability  View
38509 6725 CVE-2008-6994 31029  View
38510 6725 CVE-2008-6994 31031  View
38511 6725 CVE-2008-6994 googlechrome-saveas-bo(44935)  View
38512 6725 CVE-2008-6994 google-chrome-filename-dos(44939)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41577 JVNDB-2009-002584 Google Chrome の SaveAs 機能におけるスタックベースのバッファオーバーフローの脆弱性 Google Chrome の win_util.cc 内にある SaveAs 機能には、長いファイル名にてページを保存する際、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-6994 37107 CVE-2008-6994 6725 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002584.html 2009-08-19 2010-10-19 View