CVE-2008-6994
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc...
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.
- Record
CVE-2008-6994- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.
- Record
CVE-2008-6994- Updated
- 2026-11-02
EUVDEUVD-2008-6953 No score
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.
- Record
EUVD-2008-6953- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5467-vhqx-qjxg No score
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc...
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.
- Record
GHSA-5467-vhqx-qjxg- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Google Chrome 0.2.149.27 - 'SaveAs' Remote Buffer Overflow | 2008-09-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-6994 is a high vulnerability (CVSS 9.3) in Google Chrome, published August 18, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.2%, the 95th percentile. No source names a fixed version.
References
infoworld.com/d/security-central/critical-vulnerability-patched-in-googles-chrome-599
exchange.xforce.ibmcloud.com/vulnerabilities/44939
securityfocus.com/archive/1/496042/100/0/threaded
exploit-db.com/exploits/6367
security.bkis.vn?p=119
code.google.com/p/chromium/issues/detail?id=1414
Show 9 moreShow less
src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/win_util.cc?r1=1757&r2=1766&pathrev=1766
osvdb.org/48259
securitytracker.com/id?1020823
nvd.nist.gov/vuln/detail/CVE-2008-6994
github.com/advisories/GHSA-5467-vhqx-qjxg