Description
Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2.149.29 might allow user-assisted remote attackers to execute arbitrary code via a link target (href attribute) with a large number of path elements, which triggers the overflow when the status bar is updated after the user hovers over the link.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44934 ↗
- http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/gfx/url_elider.cc?r1=1774&r2=1797&pathrev=1797 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45032 ↗
- http://www.securityfocus.com/bid/31034 ↗
- http://googlechromereleases.blogspot.com/2008/09/beta-release-0214929.html ↗
- https://www.exploit-db.com/exploits/6372 ↗
- http://osvdb.org/48264 ↗
- http://shinnok.evonet.ro/vulns_html/chrome.html ↗
- http://www.securityfocus.com/bid/31071 ↗