Techland Chrome Denial of Service Vulnerability

Bugtraq ID:	9898
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 16 2004 12:00AM
Updated:	Mar 16 2004 12:00AM
Credit:	Discovery of this issue is credited to Luigi Auriemma <[email protected]>.
Vulnerable:	Techland Chrome 1.2 .0
Not Vulnerable:

Techland Chrome Denial of Service Vulnerability

Reportedly Chrome is prone to a remote denial of service vulnerability. This issue is due to a failure to validate input of data received via network communications.

This issue may allow a remote attacker to cause the affected server to crash, denying service to legitimate users. It has been conjectured that this issue may be leveraged to execute arbitrary code on the affected system in the context of the vulnerable process, however this is unconfirmed.

Techland Chrome Denial of Service Vulnerability

No epxloit is required to leverage this issue. The following proof of concept has been provided:

http://aluigi.altervista.org/poc/chromeboom.zip

Techland Chrome Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Techland Chrome Denial of Service Vulnerability

References:

• Chrome Home Page (Techland)
  
• Vendor Home Page (Techland)
  
• Chrome 1.2.0.0 server crash (Luigi Auriemma )