Google Chrome Inspect Element Remote Denial of Service Vulnerability

Bugtraq ID:	31038
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-6997
Remote:	Yes
Local:	No
Published:	Sep 05 2008 12:00AM
Updated:	Apr 16 2015 05:54PM
Credit:	Metacortex
Vulnerable:	Google Chrome 0.2.149 .27
Not Vulnerable:	Google Chrome 0.2.149 .29

Google Chrome Inspect Element Remote Denial of Service Vulnerability

Google Chrome is prone to a remote denial-of-service vulnerability because the application fails to handle specially crafted HTML 'img' tags.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Given the nature of this issue, attackers may also be able to run arbitrary code, but this has not been confirmed.

Google Chrome 0.2.149.27 is vulnerable; other versions may also be affected.

Google Chrome Inspect Element Remote Denial of Service Vulnerability

The following example code is available:

• /data/vulnerabilities/exploits/31038.html

Google Chrome Inspect Element Remote Denial of Service Vulnerability

Solution:
The vendor has addressed this issue in Chrome 0.3.149.29. Contact the vendor for details on obtaining the appropriate updates.

Google Chrome Inspect Element Remote Denial of Service Vulnerability

References:

• Google Chrome Homepage (Google)