CVE-2008-6997

Google Chrome - Denial of Service

Title source: rule

Description

Google Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service (browser crash) via an IMG tag with a long src attribute, which triggers the crash when the victim performs an "Inspect Element" action.

Exploits (1)

exploitdb SUSPICIOUS VERIFIED

by Metacortex · htmldoswindows

https://www.exploit-db.com/exploits/6386

View Code ZIP pw:eip

References (5)

[Third Party Advisory, VDB Entry] http://osvdb.org/48260

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/6386

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/44941

[Various Sources] http://badzmanaois.blogspot.com/2008/09/google-chrome-inspect-element-denial-of.html

[Exploit] http://www.securityfocus.com/bid/31038

Scores

EPSS 0.0409

EPSS Percentile 88.6%

Details

Status published

Products (1)

google/chrome 0.2.149.27

Published Aug 19, 2009

Tracked Since Feb 18, 2026