[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Google Chrome Browser 0.2.149.27 malicious link DoS Vulnerability

Author
Rishi Narang
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-6590
Category
dos / poc
Date add
02-09-2008
Platform
unsorted
=================================================================
Google Chrome Browser 0.2.149.27 malicious link DoS Vulnerability
=================================================================




---------------------------------------------------
Software:
Google Chrome Browser 0.2.149.27

Tested:
Windows XP Professional SP3

Result:
Google Chrome Crashes with All Tabs

Problem:
An issue exists in how chrome behaves with undefined-handlers in chrome.dll version 
0.2.149.27. A crash can result without user interaction. When a user is made to visit 
a malicious link, which has an undefined handler followed by a 'special' character, 
the chrome crashes with a Google Chrome message window "Whoa! Google Chrome has crashed. 
Restart now?". It lies in dealing with the POP EBP instruction when pointed out by the 
EIP register at 0x01002FF4.

Proof of Concept:
http://evilfingers.com/advisory/google_chrome_poc.php

Credit:
Rishi Narang (psy.echo)
www.greyhat.in
www.evilfingers.com
---------------------------------------------------

PoC Working/Exploit:
Click for a demo <a href="EVIL:%">HERE</a>



#  0day.today [2024-09-28]  #