Lucene search

K
cve[email protected]CVE-2008-7061
HistoryAug 24, 2009 - 7:30 p.m.

CVE-2008-7061

2009-08-2419:30:00
CWE-399
web.nvd.nist.gov
22
cve-2008-7061
google chrome
tooltip manager
denial of service
vulnerability
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

Low

0.195 Low

EPSS

Percentile

96.3%

The tooltip manager (chrome/views/tooltip_manager.cc) in Google Chrome 0.2.149.29 Build 1798 and possibly other versions before 0.2.149.30 allows remote attackers to cause a denial of service (CPU consumption or crash) via a tag with a long title attribute, which is not properly handled when displaying a tooltip, a different vulnerability than CVE-2008-6994. NOTE: there is inconsistent information about the environments under which this issue exists.

Affected configurations

NVD
Node
googlechromeMatch0.2.149.29
CPENameOperatorVersion
google:chromegoogle chromeeq0.2.149.29

References

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

Low

0.195 Low

EPSS

Percentile

96.3%