PT-2009-2530 · Google · Google Chrome

Published 2009-08-24 · Updated 2018-10-11 · CVE-2008-7061

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions 0.2.149.29 through 0.2.149.29

Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption or a crash, by utilizing a tag with a long title attribute that is not properly handled when displaying a tooltip.

Recommendations For Google Chrome version 0.2.149.29, update to version 0.2.149.30 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-7061

Affected Products

Google Chrome

References · 18

• 🔥 http://securityfocus.com/archive/1/496145/100/0/threaded · Exploit
• 🔥 http://src.chromium.org/viewvc/chrome/trunk/src/chrome/views/tooltip_manager.cc?r1=1287&r2=2042&pathrev=2042 · Exploit
• 🔥 https://exploit-db.com/exploits/32311 · Exploit
• 🔥 http://securityfocus.com/bid/30975 · Exploit
• 🔥 http://securityfocus.com/archive/1/496151/100/0/threaded · Exploit
• 🔥 http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/render_widget_host_hwnd.cc?r1=1287&r2=2042&pathrev=2042 · Exploit
• 🔥 http://securityfocus.com/archive/1/496138/100/0/threaded · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-7061 · Security Note
• http://securityfocus.com/archive/1/496146/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45039 · Note
• http://securityfocus.com/archive/1/496101/100/0/threaded · Note
• http://securityfocus.com/archive/1/496172/100/100/threaded · Note
• http://blackhat.org.il/exploits/chrome-freeze-exploit.html · Note
• http://googlechromereleases.blogspot.com/2008/09/beta-release-0214930.html · Note
• http://src.chromium.org/viewvc/chrome?view=rev&revision=2042 · Note