PT-2009-2465 · Google · Google Chrome

Nerex · Publicado 2009-08-18 · Atualizado 2018-10-11 · CVE-2008-6996

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome BETA version 0.2.149.27

Description The issue allows remote attackers or malware to cause a denial of service or exploit other weaknesses by saving executable files without prompting the user, potentially related to the setting that controls where to save files before downloading.

Recommendations For Google Chrome BETA version 0.2.149.27, consider enabling the "ask where to save each file before downloading" setting to prompt the user before saving executable files, which can help mitigate the risk of denial of service or exploitation of other vulnerabilities.

Exploit

Correção

Identificadores relacionados

CVE-2008-6996

Produtos afetados

Google Chrome

Referências · 14

• 🔥 https://exploit-db.com/exploits/6355 · Exploit
• 🔥 http://codereview.chromium.org/472/diff/1/2 · Exploit
• http://securityfocus.com/bid/31000 · Nota
• http://securityfocus.com/archive/1/495951/100/100/threaded · Nota
• http://securityfocus.com/archive/1/496049 · Nota
• http://securityfocus.com/archive/1/495987/100/0/threaded · Nota
• http://securityfocus.com/archive/1/496048/100/100/threaded · Nota
• http://osvdb.org/48261 · Nota
• http://src.chromium.org/viewvc/chrome?view=rev&revision=1793 · Nota
• http://securityfocus.com/archive/1/495942/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44904 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-6996 · Nota de Segurança
• http://securityfocus.com/archive/1/495954/100/100/threaded · Nota
• http://securityfocus.com/archive/1/495959/100/100/threaded · Nota