peter bassill · operator
$ cve CVE-2008-7061 JSON

CVE-2008-7061 EXPLOIT

4.3
MEDIUM · CVSS 2.0 · EPSS 4.3% (pctl 91)

Patch early

A public exploit exists.

Description

The tooltip manager (chrome/views/tooltip_manager.cc) in Google Chrome 0.2.149.29 Build 1798 and possibly other versions before 0.2.149.30 allows remote attackers to cause a denial of service (CPU consumption or crash) via a tag with a long title attribute, which is not properly handled when displaying a tooltip, a different vulnerability than CVE-2008-6994. NOTE: there is inconsistent information about the environments under which this issue exists.

Scoring

CVSS4.3 (MEDIUM, v2.0)
VectorAV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS4.26% — more likely to be exploited than 91% of all CVEs
WeaknessCWE-399
On CISA KEVno
Public exploityes
Published2009-08-24
Last modified2026-06-16

Affected (1)

VendorProduct
googlechrome

Public exploits

SourceTitleDate
exploit-dbGoogle Chrome 0.2.149 - Malformed 'title' Tag Remote Denial of Service2008-09-02

References

→ the Explorer  ·  watch your stack  ·  NVD