CVE-2008-5749

2008-12-2915:00:00

mitre

www.cve.org

7.5 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

83.2%

JSON

Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI. NOTE: a third party disputes this issue, stating that Chrome “will ask for user permission” and "cannot launch the applet even [if] you have given out the permission.