Google Chrome 'SaveAs' Function Buffer Overflow Vulnerability
7 Sep. 2008
Summary
The vulnerability in Google Chrome is caused due to a boundary error when handling the "SaveAs" function. On saving a malicious page with an overly long title (<title> tag in HTML), the program causes a stack-based overflow and makes it possible for attackers to execute arbitrary code on users' systems.
Vulnerable Systems:
* Google Chrome version 0.2.149.27
* Google Chrome version 0.2.149.28
To exploit the vulnerability, a hacker might construct a specially crafted Web page, which contains malicious code. He then tricks users into visiting his Website and convinces them to save this Page. Right after that, the code would be executed, giving him the privilege to make use of the affected system.
