vulnwire
4.3med

CVE-2008-69951 exploit

Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a denial of service (bro…

Published 17 y ago · modified 4 mo ago · JSON

CVSS
4.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
4.8%
percentile 92%
Public exploits
1
Exploit-DB

Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a denial of service (browser crash) via a URI with an invalid handler followed by a "%" (percent) character, which triggers a buffer over-read, as demonstrated using an "about:%" URI.

Exploit prediction (EPSS)

4.80% probability of exploitation in the next 30 days, higher than 92% of all scored CVEs.

Exploits and detections

  • EDB-6353 Google Chrome 0.2.149.27 - Denial of Service · dos · 2008-09-03

CVSS scores

Assigned byVersionScoreVector
NVD2.04.3AV:N/AC:M/Au:N/C:N/I:N/A:P

Classification

Weakness
Technology feeds
Google Chrome (RSS, critical only)

References

  • osvdb.org /47908 · vdb-entry, x_refsource_OSVDB, x_transferred
  • evilfingers.com /advisory/Google_Chrome_Browser_0.2.149.27_in_chrome_dll.php · x_refsource_MISC, x_transferred
  • archives.neohapsis.com /archives/bugtraq/2008-09/0028.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • src.chromium.org /viewvc/chrome/branches/chrome_official_branch/src/net/base/escape.cc?r1=1757&r2=1760&path · x_refsource_CONFIRM, x_transferred
  • evilfingers.com /advisory/google_chrome_poc.php · x_refsource_MISC, x_transferred
  • code.google.com /p/chromium/issues/detail?id=122 · x_refsource_CONFIRM, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/44899 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/30983 · vdb-entry, x_refsource_BID, x_transferred
  • exploit-db.com /exploits/6353 · exploit, x_refsource_EXPLOIT-DB, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.