RETIRED: Google Chrome Malformed 'href' Tag Remote Denial of Service Vulnerability

Bugtraq ID:	31034
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Sep 05 2008 12:00AM
Updated:	Sep 10 2008 05:40PM
Credit:	Shinnok
Vulnerable:	Google Chrome 0.2.149 .27
Not Vulnerable:

RETIRED: Google Chrome Malformed 'href' Tag Remote Denial of Service Vulnerability

Google Chrome is prone to a remote denial-of-service vulnerability because the application fails to handle specially crafted HTML 'href' tags.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Given the nature of this issue, attackers may also be able to run arbitrary code, but this has not been confirmed.

Google Chrome 0.2.149.27 is vulnerable; other versions may also be affected.

NOTE: This BID is being retired because it is a duplicate of BID 31071 (Google Chrome 'url_elider.cc' Buffer Overflow Vulnerability).

RETIRED: Google Chrome Malformed 'href' Tag Remote Denial of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/31034.html

RETIRED: Google Chrome Malformed 'href' Tag Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Google Chrome Malformed 'href' Tag Remote Denial of Service Vulnerability

References:

• Google Chrome Homepage (Google)