Description
Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask where to save each file before downloading" setting.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/31000 ↗
- http://www.securityfocus.com/archive/1/495987/100/0/threaded ↗
- http://codereview.chromium.org/472/diff/1/2 ↗
- http://www.securityfocus.com/archive/1/495942/100/0/threaded ↗
- http://www.securityfocus.com/archive/1/495951/100/100/threaded ↗
- http://www.securityfocus.com/archive/1/495959/100/100/threaded ↗
- http://www.osvdb.org/48261 ↗
- http://www.securityfocus.com/archive/1/495954/100/100/threaded ↗
- https://www.exploit-db.com/exploits/6355 ↗
- http://www.securityfocus.com/archive/1/496049 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44904 ↗
- http://src.chromium.org/viewvc/chrome?view=rev&revision=1793 ↗
- http://www.securityfocus.com/archive/1/496048/100/100/threaded ↗