CVE-2008-6995
Google Chrome 0.2.149.27 - Denial of Service via URI Handler Integer Underflow
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-6995. PoCs published by Rishi Narang.
AI-analyzed exploit summary This exploit demonstrates a DoS vulnerability in Google Chrome 0.2.149.27 by triggering a crash via an undefined handler followed by a special character in a URL. The PoC leverages a malformed link to cause a crash without user interaction.
Description
Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a denial of service (browser crash) via a URI with an invalid handler followed by a "%" (percent) character, which triggers a buffer over-read, as demonstrated using an "about:%" URI.
Exploits (1)
This exploit demonstrates a DoS vulnerability in Google Chrome 0.2.149.27 by triggering a crash via an undefined handler followed by a special character in a URL. The PoC leverages a malformed link to cause a crash without user interaction.