5

CVE-2008-6996

Exploit
Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask where to save each file before downloading" setting.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
GoogleChrome Version0.2.149.27
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.42% 0.928
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://codereview.chromium.org/472/diff/1/2
Exploit
http://src.chromium.org/viewvc/chrome?view=rev&revision=1793
http://www.osvdb.org/48261
http://www.securityfocus.com/archive/1/495942/100/0/threaded
http://www.securityfocus.com/archive/1/495951/100/100/threaded
http://www.securityfocus.com/archive/1/495954/100/100/threaded
http://www.securityfocus.com/archive/1/495959/100/100/threaded
http://www.securityfocus.com/archive/1/495987/100/0/threaded
http://www.securityfocus.com/archive/1/496048/100/100/threaded
http://www.securityfocus.com/archive/1/496049
http://www.securityfocus.com/bid/31000
https://exchange.xforce.ibmcloud.com/vulnerabilities/44904
https://www.exploit-db.com/exploits/6355