CVE-2008-6998

Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2.149.29 might allow user-assisted remote attackers to execute arbitrary code via a link target (href attribute) with a large number of path elements, which triggers the overflow when the status bar is updated after the user hovers over the link.

• CWE-119

• http://googlechromereleases.blogspot.com/2008/09/beta-release-0214929.htmlVendor Advisory
• http://osvdb.org/48264
• http://shinnok.evonet.ro/vulns_html/chrome.htmlExploit
• http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/gfx/url_elider.cc?r1=1774&r2=1797&pathrev=1797Patch
• http://www.securityfocus.com/bid/31034Exploit
• http://www.securityfocus.com/bid/31071Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44934
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45032
• https://www.exploit-db.com/exploits/6372
• http://googlechromereleases.blogspot.com/2008/09/beta-release-0214929.htmlVendor Advisory
• http://osvdb.org/48264
• http://shinnok.evonet.ro/vulns_html/chrome.htmlExploit
• http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/gfx/url_elider.cc?r1=1774&r2=1797&pathrev=1797Patch
• http://www.securityfocus.com/bid/31034Exploit
• http://www.securityfocus.com/bid/31071Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44934
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45032
• https://www.exploit-db.com/exploits/6372

Published

Aug 19, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-6992GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.…
• CVE-2008-6993Siemens Gigaset WLAN Camera 1.27 has an insecure default pas…
• CVE-2008-6994Stack-based buffer overflow in the SaveAs feature (SaveFileA…
• CVE-2008-6995Integer underflow in net/base/escape.cc in chrome.dll in Goo…
• CVE-2008-6996Google Chrome BETA (0.2.149.27) does not prompt the user bef…
• CVE-2008-6997Google Chrome 0.2.149.27 allows user-assisted remote attacke…
• CVE-2008-6999phpAuction 3.2, and possibly 3.3.0 GPL Basic edition, allows…
• CVE-2008-7000PHP remote file inclusion vulnerability in index.php in PHPA…
• CVE-2008-7001Unrestricted file upload vulnerability in the file manager i…
• CVE-2008-7002PHP 5.2.5 does not enforce (a) open_basedir and (b) safe_mod…
• CVE-2008-7003Multiple SQL injection vulnerabilities in login.php in The R…
• CVE-2008-7004Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 ha…