Google Chrome 0.2.149.27 - Denial of Service
| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | CVE-2008-6995 | 3 Sep 200800:00 | – | circl |
 | CVE-2008-6995 | 18 Aug 200910:00 | – | cve |
 | CVE-2008-6995 | 18 Aug 200910:00 | – | cvelist |
 | CVE-2008-6995 | 18 Aug 200910:00 | – | debiancve |
 | EUVD-2008-6954 | 7 Oct 202500:30 | – | euvd |
 | Google Chrome < 0.2.149.29 Multiple Vulnerabilities | 12 Sep 200800:00 | – | nessus |
 | CVE-2008-6995 | 19 Aug 200905:24 | – | nvd |
 | Google Chrome < 0.2.149.29 Multiple Vulnerabilities | 10 Sep 200800:00 | – | openvas |
| Google Chrome multiple vulnerabilities | 10 Sep 200800:00 | – | openvas |
 | Integer overflow | 19 Aug 200905:24 | – | prion |
10
---------------------------------------------------
Software:
Google Chrome Browser 0.2.149.27
Tested:
Windows XP Professional SP3
Result:
Google Chrome Crashes with All Tabs
Problem:
An issue exists in how chrome behaves with undefined-handlers in chrome.dll version
0.2.149.27. A crash can result without user interaction. When a user is made to visit
a malicious link, which has an undefined handler followed by a 'special' character,
the chrome crashes with a Google Chrome message window "Whoa! Google Chrome has crashed.
Restart now?". It lies in dealing with the POP EBP instruction when pointed out by the
EIP register at 0x01002FF4.
Proof of Concept:
http://evilfingers.com/advisory/google_chrome_poc.php
Credit:
Rishi Narang (psy.echo)
www.greyhat.in
www.evilfingers.com
---------------------------------------------------
PoC Working/Exploit:
Click for a demo <a href="EVIL:%">HERE</a>
# milw0rm.com [2008-09-03]Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
30 Oct 2016 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 24.3
EPSS0.048