CVE-2008-6998

EUVD-2008-6957
Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2.149.29 might allow user-assisted remote attackers to execute arbitrary code via a link target (href attribute) with a large number of path elements, which triggers the overflow when the status bar is updated after the user hovers over the link.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
Affected Products (NVD)
VendorProductVersion
googlechrome
0.2.149.27
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://googlechromereleases.blogspot.com/2008/09/beta-release-0214929.html
http://osvdb.org/48264
http://shinnok.evonet.ro/vulns_html/chrome.html
http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/gfx/url_elider.cc?r1=1774&r2=1797&pathrev=1797
http://www.securityfocus.com/bid/31034
http://www.securityfocus.com/bid/31071
https://exchange.xforce.ibmcloud.com/vulnerabilities/44934
https://exchange.xforce.ibmcloud.com/vulnerabilities/45032
https://www.exploit-db.com/exploits/6372
http://googlechromereleases.blogspot.com/2008/09/beta-release-0214929.html
http://osvdb.org/48264
http://shinnok.evonet.ro/vulns_html/chrome.html
http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/gfx/url_elider.cc?r1=1774&r2=1797&pathrev=1797
http://www.securityfocus.com/bid/31034
http://www.securityfocus.com/bid/31071
https://exchange.xforce.ibmcloud.com/vulnerabilities/44934
https://exchange.xforce.ibmcloud.com/vulnerabilities/45032
https://www.exploit-db.com/exploits/6372