5
CVSSv2

CVE-2008-6996

Published: 19/08/2009 Updated: 11/10/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask where to save each file before downloading" setting.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome 0.2.149.27

Exploits

*************************************************************************** Author: nerex E-mail: nerex[at]live[dot]com Google's new Web browser (Chrome) allows files (eg, executables) to be automatically downloaded to the user's computer without any user prompt This proof-of-concept was created for educational purposes only Use the cod ...