NVD

Id
6726  
Name
CVE-2008-6995  
Description
Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a denial of service (browser crash) via a URI with an invalid handler followed by a "%" (percent) character, which triggers a buffer over-read, as demonstrated using an "about:%" URI.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2009-08-19  
Modified Date
2009-09-01  
Seq
2008-6995  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
38513 6726 CVE-2008-6995 20080902 Google Chrome Browser (ver.0.2.149.27) Vulnerability  View
38514 6726 CVE-2008-6995 http://code.google.com/p/chromium/issues/detail?id=122  View
38515 6726 CVE-2008-6995 http://evilfingers.com/advisory/google_chrome_poc.php  View
38516 6726 CVE-2008-6995 http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/net/base/escape.cc?r1=1757&r2=1760&pathrev=1760  View
38517 6726 CVE-2008-6995 6353  View
38518 6726 CVE-2008-6995 30983  View
38519 6726 CVE-2008-6995 google-chrome-handlers-dos(44899)  View
38520 6726 CVE-2008-6995 https://www.evilfingers.com/advisory/Google_Chrome_Browser_0.2.149.27_in_chrome_dll.php  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41578 JVNDB-2009-002585 Google Chrome の net/base/escape.cc における整数アンダーフローの脆弱性 Google Chrome の chrome.dll 内にある net/base/escape.cc には、整数アンダーフローの脆弱性が存在します。 CVE-2008-6995 37108 CVE-2008-6995 6726 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002585.html 2009-08-19 2010-10-19 View