peter bassill · operator
$ cve CVE-2008-6994 JSON

CVE-2008-6994 EXPLOIT

9.3
HIGH · CVSS 2.0 · EPSS 10.2% (pctl 96)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.

Scoring

CVSS9.3 (HIGH, v2.0)
VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS10.22% — more likely to be exploited than 96% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2009-08-19
Last modified2026-06-16

Affected (1)

VendorProduct
googlechrome

Public exploits

SourceTitleDate
exploit-dbGoogle Chrome 0.2.149.27 - 'SaveAs' Remote Buffer Overflow2008-09-05

References

→ the Explorer  ·  watch your stack  ·  NVD