Google Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/google/ Sun, 26 Feb 2023 09:11:56 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Google Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/google/ 32 32 CVE-2008-7246 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7246/ Sun, 26 Feb 2023 09:11:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7246/ Google Chrome 0.2.149.29 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a “printing DoS attack,” possibly a related issue to CVE-2009-0821.

The post CVE-2008-7246 appeared first on CVE Vulnerability.

]]> Google Chrome 0.2.149.29 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a “printing DoS attack,” possibly a related issue to CVE-2009-0821.

The post CVE-2008-7246 appeared first on CVE Vulnerability.

]]> CVE-2008-7061 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7061/ Sun, 26 Feb 2023 09:11:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7061/ The tooltip manager (chrome/views/tooltip_manager.cc) in Google Chrome 0.2.149.29 Build 1798 and possibly other versions before 0.2.149.30 allows remote attackers to cause a denial of service (CPU consumption or crash) via a tag with a long title attribute, which is not properly handled when displaying a tooltip, a different vulnerability than CVE-2008-6994. NOTE: there is inconsistent […]

The post CVE-2008-7061 appeared first on CVE Vulnerability.

]]> The tooltip manager (chrome/views/tooltip_manager.cc) in Google Chrome 0.2.149.29 Build 1798 and possibly other versions before 0.2.149.30 allows remote attackers to cause a denial of service (CPU consumption or crash) via a tag with a long title attribute, which is not properly handled when displaying a tooltip, a different vulnerability than CVE-2008-6994. NOTE: there is inconsistent information about the environments under which this issue exists.

The post CVE-2008-7061 appeared first on CVE Vulnerability.

]]> CVE-2008-6994 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6994/ Sun, 26 Feb 2023 09:11:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6994/ Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit […]

The post CVE-2008-6994 appeared first on CVE Vulnerability.

]]> Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.

The post CVE-2008-6994 appeared first on CVE Vulnerability.

]]> CVE-2008-6995 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6995/ Sun, 26 Feb 2023 09:11:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6995/ Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a denial of service (browser crash) via a URI with an invalid handler followed by a “%” (percent) character, which triggers a buffer over-read, as demonstrated using an “about:%” URI.

The post CVE-2008-6995 appeared first on CVE Vulnerability.

]]> Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a denial of service (browser crash) via a URI with an invalid handler followed by a “%” (percent) character, which triggers a buffer over-read, as demonstrated using an “about:%” URI.

The post CVE-2008-6995 appeared first on CVE Vulnerability.

]]> CVE-2008-6996 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6996/ Sun, 26 Feb 2023 09:11:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6996/ Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the “ask where to save each file before downloading” […]

The post CVE-2008-6996 appeared first on CVE Vulnerability.

]]> Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the “ask where to save each file before downloading” setting.

The post CVE-2008-6996 appeared first on CVE Vulnerability.

]]> CVE-2008-6997 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6997/ Sun, 26 Feb 2023 09:11:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6997/ Google Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service (browser crash) via an IMG tag with a long src attribute, which triggers the crash when the victim performs an “Inspect Element” action.

The post CVE-2008-6997 appeared first on CVE Vulnerability.

]]> Google Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service (browser crash) via an IMG tag with a long src attribute, which triggers the crash when the victim performs an “Inspect Element” action.

The post CVE-2008-6997 appeared first on CVE Vulnerability.

]]> CVE-2008-6998 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6998/ Sun, 26 Feb 2023 09:11:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6998/ Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2.149.29 might allow user-assisted remote attackers to execute arbitrary code via a link target (href attribute) with a large number of path elements, which triggers the overflow when the status bar is updated after the user hovers over the link.

The post CVE-2008-6998 appeared first on CVE Vulnerability.

]]> Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2.149.29 might allow user-assisted remote attackers to execute arbitrary code via a link target (href attribute) with a large number of path elements, which triggers the overflow when the status bar is updated after the user hovers over the link.

The post CVE-2008-6998 appeared first on CVE Vulnerability.

]]> CVE-2008-0985 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0985/ Sun, 26 Feb 2023 09:08:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0985/ Heap-based buffer overflow in the GIF library in the WebKit framework for Google Android SDK m3-rc37a and earlier allows remote attackers to execute arbitrary code via a crafted GIF file whose logical screen height and width are different than the actual height and width.

The post CVE-2008-0985 appeared first on CVE Vulnerability.

]]> Heap-based buffer overflow in the GIF library in the WebKit framework for Google Android SDK m3-rc37a and earlier allows remote attackers to execute arbitrary code via a crafted GIF file whose logical screen height and width are different than the actual height and width.

The post CVE-2008-0985 appeared first on CVE Vulnerability.

]]> CVE-2008-0986 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0986/ Sun, 26 Feb 2023 09:08:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0986/ Integer overflow in the BMP::readFromStream method in the libsgl.so library in Google Android SDK m3-rc37a and earlier, and m5-rc14, allows remote attackers to execute arbitrary code via a crafted BMP file with a header containing a negative offset field.

The post CVE-2008-0986 appeared first on CVE Vulnerability.

]]> Integer overflow in the BMP::readFromStream method in the libsgl.so library in Google Android SDK m3-rc37a and earlier, and m5-rc14, allows remote attackers to execute arbitrary code via a crafted BMP file with a header containing a negative offset field.

The post CVE-2008-0986 appeared first on CVE Vulnerability.

]]> CVE-2020-8935 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8935/ Sun, 26 Feb 2023 06:43:35 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8935/ An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore function call to reallocate untrusted code and overwrite sections of the Enclave memory address. We recommend updating your library.

The post CVE-2020-8935 appeared first on CVE Vulnerability.

]]> An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore function call to reallocate untrusted code and overwrite sections of the Enclave memory address. We recommend updating your library.

The post CVE-2020-8935 appeared first on CVE Vulnerability.

]]>