RETIRED: Google Chrome Malformed Attachment Filename Remote Denial of Service Vulnerability

Bugtraq ID:	31031
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Sep 05 2008 12:00AM
Updated:	Sep 10 2008 05:30PM
Credit:	Kernel32
Vulnerable:	Google Chrome 0.2.149 .27
Not Vulnerable:

RETIRED: Google Chrome Malformed Attachment Filename Remote Denial of Service Vulnerability

Google Chrome is prone to a remote denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Given the nature of this issue, attackers may also be able to run arbitrary code, but this has not been confirmed.

Google Chrome 0.2.149.27 is vulnerable; other versions may also be affected.

NOTE: This BID is being retired because it is a duplicate of BID 31029 (Google Chrome 'SaveAs' Function 'Title' Tag Buffer Overflow Vulnerability).

RETIRED: Google Chrome Malformed Attachment Filename Remote Denial of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/31031.php

RETIRED: Google Chrome Malformed Attachment Filename Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Google Chrome Malformed Attachment Filename Remote Denial of Service Vulnerability

References:

• Google Chrome Homepage (Google)