CVE-2008-6996
Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which...
Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask where to save each file before downloading" setting.
Exploit likelihood
What each source reports
NVD Score used
Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask where to save each file before downloading" setting.
- Record
CVE-2008-6996- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask where to save each file before downloading" setting.
- Record
CVE-2008-6996- Updated
- 2026-11-02
EUVDEUVD-2008-6955 No score
Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask where to save each file before downloading" setting.
- Record
EUVD-2008-6955- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pjjf-xfv6-m83w No score
Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which...
Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask where to save each file before downloading" setting.
- Record
GHSA-pjjf-xfv6-m83w- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Google Chrome 0.2.149.27 - Automatic File Download | 2008-09-03 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-6996 is a medium vulnerability (CVSS 5.0) in Google Chrome, published August 18, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.42%, the 93rd percentile. No source names a fixed version.
References
securityfocus.com/bid/31000
codereview.chromium.org/472/diff/1/2
Show 9 moreShow less
osvdb.org/48261
exploit-db.com/exploits/6355
exchange.xforce.ibmcloud.com/vulnerabilities/44904
src.chromium.org/viewvc/chrome?view=rev&revision=1793
nvd.nist.gov/vuln/detail/CVE-2008-6996
github.com/advisories/GHSA-pjjf-xfv6-m83w