CVE-2008-6998

{"id": "CVE-2008-6998", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2009-08-19T05:24:52.797", "references": [{"url": "http://googlechromereleases.blogspot.com/2008/09/beta-release-0214929.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://osvdb.org/48264", "source": "cve@mitre.org"}, {"url": "http://shinnok.evonet.ro/vulns_html/chrome.html", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/gfx/url_elider.cc?r1=1774&r2=1797&pathrev=1797", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/31034", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/31071", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44934", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45032", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/6372", "source": "cve@mitre.org"}, {"url": "http://googlechromereleases.blogspot.com/2008/09/beta-release-0214929.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/48264", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://shinnok.evonet.ro/vulns_html/chrome.html", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/gfx/url_elider.cc?r1=1774&r2=1797&pathrev=1797", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/31034", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/31071", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44934", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45032", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/6372", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2.149.29 might allow user-assisted remote attackers to execute arbitrary code via a link target (href attribute) with a large number of path elements, which triggers the overflow when the status bar is updated after the user hovers over the link."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer basado en pila en chrome/common/gfx/url_elider.cc en Google Chrome v0.2.149.27 y otras versiones anteriores a v0.2.149.29, podr\u00eda permitir a atacantes remotos asistidos por usuarios ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s del objetivo de un enlace (atributo href) con un n\u00famero de elementos de path largo, lo que provocar\u00e1 un desbordamiento cuando la barra de estado se ha actualizado despu\u00e9s de que el usuario mueva el rat\u00f3n sobre el enlace."}], "lastModified": "2024-11-21T00:58:01.013", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D55D5075-D233-42D6-B1D6-77B7599650EB"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}