PT-2009-2465 · Google · Google Chrome

Nerex · Published 2009-08-18 · Updated 2018-10-11 · CVE-2008-6996

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome BETA version 0.2.149.27

Description The issue allows remote attackers or malware to cause a denial of service or exploit other weaknesses by saving executable files without prompting the user, potentially related to the setting that controls where to save files before downloading.

Recommendations For Google Chrome BETA version 0.2.149.27, consider enabling the "ask where to save each file before downloading" setting to prompt the user before saving executable files, which can help mitigate the risk of denial of service or exploitation of other vulnerabilities.

Exploit

Fix

Related Identifiers

CVE-2008-6996

Affected Products

Google Chrome

References · 14

• 🔥 https://exploit-db.com/exploits/6355 · Exploit
• 🔥 http://codereview.chromium.org/472/diff/1/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6996 · Security Note
• http://securityfocus.com/bid/31000 · Note
• http://securityfocus.com/archive/1/495951/100/100/threaded · Note
• http://securityfocus.com/archive/1/496049 · Note
• http://securityfocus.com/archive/1/495987/100/0/threaded · Note
• http://securityfocus.com/archive/1/496048/100/100/threaded · Note
• http://osvdb.org/48261 · Note
• http://src.chromium.org/viewvc/chrome?view=rev&revision=1793 · Note
• http://securityfocus.com/archive/1/495942/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44904 · Note
• http://securityfocus.com/archive/1/495954/100/100/threaded · Note
• http://securityfocus.com/archive/1/495959/100/100/threaded · Note