CVE-2008-6994
Google Chrome 0.2.149.27 - Stack-Based Buffer Overflow via Long TITLE Element in SaveAs Feature
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-6994. PoCs published by SVRT, WHK.
AI-analyzed exploit summary The provided text describes a buffer overflow vulnerability in Google Chrome 0.2.149.27, where a stack-based overflow occurs when saving a webpage with an overly long title. The exploit requires user interaction to save the malicious page, leading to remote code execution.
Description
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.
Exploits (2)
The provided text describes a buffer overflow vulnerability in Google Chrome 0.2.149.27, where a stack-based overflow occurs when saving a webpage with an overly long title. The exploit requires user interaction to save the malicious page, leading to remote code execution.
This exploit is a proof-of-concept for a denial-of-service (DoS) vulnerability in Google Chrome 0.2.149.27. It triggers a crash by forcing the browser to handle an excessively long filename in a download header.