Issue metadata
Sign in to add a comment
|
Security - Chrome Client DoS vulnerability
Reported by
chenhuij...@gmail.com,
Jul 17 2017
|
||||||||||||||||||
Issue descriptionVULNERABILITY DETAILS when access the following url: https://www.google.com.sg/webhp?num=100&biw=1271&bih=733&gws_rd=cr&ei=X2VsWdXYBsf-8QWYubLgDg#36;&oq=%26%2336%3B&gs_l=psy-ab.12..0l4.1364.1364.0.2532.1.1.0.0.0.0.107.107.0j1.1.0....0...1.1.64.psy-ab..0.1.106.BfuxLpnofKc The Chrome browser will fresh the page without stop. If an attacker give this link to a group of victims , it may cause large traffic DoS to Google site. I think that "ei=X2VsWdXYBsf-8QWYubLgDg#36;" which is not base64 format may cause this vulnerability. VERSION Chrome Version: [59.0.3071.115](win 32bit) Operating System: [Windows, Windows 7, SP1] REPRODUCTION CASE https://www.google.com.sg/webhp?num=100&biw=1271&bih=733&gws_rd=cr&ei=X2VsWdXYBsf-8QWYubLgDg#36;&oq=%26%2336%3B&gs_l=psy-ab.12..0l4.1364.1364.0.2532.1.1.0.0.0.0.107.107.0j1.1.0....0...1.1.64.psy-ab..0.1.106.BfuxLpnofKc FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION NA
,
Oct 24 2017
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||
Comment 1 by elawrence@chromium.org
, Jul 17 2017