Unrated severityNVD Advisory· Published Aug 19, 2009· Updated Jun 16, 2026
CVE-2008-6994
CVE-2008-6994
Description
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
13- security.bkis.vnnvdExploit
- securitytracker.com/idnvdExploit
- src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/win_util.ccnvdExploit
- www.infoworld.com/d/security-central/critical-vulnerability-patched-in-googles-chrome-599nvdExploit
- www.securityfocus.com/bid/31029nvdExploit
- www.securityfocus.com/bid/31031nvdExploit
- code.google.com/p/chromium/issues/detailnvd
- osvdb.org/48259nvd
- www.securityfocus.com/archive/1/496042/100/0/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/44935nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/44939nvd
- www.exploit-db.com/exploits/6365nvd
- www.exploit-db.com/exploits/6367nvd
News mentions
0No linked articles in our index yet.