Lucene search

[email protected]NVD:CVE-2008-5749

HistoryDec 29, 2008 - 3:24 p.m.

CVE-2008-5749

2008-12-2915:24:23

CWE-94

[email protected]

web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

83.2%

JSON

Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI. NOTE: a third party disputes this issue, stating that Chrome “will ask for user permission” and "cannot launch the applet even [if] you have given out the permission.

Affected configurations

NVD

Node

googlechromeMatch1.0.154.36

AND

microsoftwindows_xpsp3

References

retrogod.altervista.org/9sg_chrome.html

securityreason.com/securityalert/4821

www.securityfocus.com/archive/1/499570/100/0/threaded

www.securityfocus.com/archive/1/499581/100/0/threaded

www.securityfocus.com/archive/1/499616/100/0/threaded

www.securityfocus.com/bid/32997

www.exploit-db.com/exploits/7566

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

83.2%

JSON

Related for NVD:CVE-2008-5749

cvelist1 prion1 openvas2 cve1