Incomplete blacklist vulnerability in browser/download/download_exe.cc in Google Chrome before 3.0.195.32 allows remote attackers to force…

Description

Incomplete blacklist vulnerability in browser/download/download_exe.cc in Google Chrome before 3.0.195.32 allows remote attackers to force the download of certain dangerous files via a "Content-Disposition: attachment" designation, as demonstrated by (1) .mht and (2) .mhtml files, which are automatically executed by Internet Explorer 6; (3) .svg files, which are automatically executed by Safari; (4) .xml files; (5) .htt files; (6) .xsl files; (7) .xslt files; and (8) image files that are forbidden by the victim's site policy.

Scores

EPSS (exploitation in 30 days)

2.3% · top 17% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 9.3.

Weakness

• n/a
• CWE-20 (opens in a new tab)All about CWE-20 and its CVEs

Affected products

• n/a

  • affected n/a

References (13)

• http://codereview.chromium.org/download/issue243115_2002.diff (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://code.google.com/p/chromium/issues/detail?id=23979 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://codereview.chromium.org/243115 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://securethoughts.com/2009/11/using-blended-browser-threats-involving-chrome-to-steal-files-on-your-computer/ (opens in a new tab)x_refsource_MISCx_transferred
• 59742 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• http://codereview.chromium.org/261022 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 37273 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://codereview.chromium.org/download/issue261022_1.diff (opens in a new tab)x_refsource_CONFIRMx_transferred
• google-chrome-warning-weak-security(54171) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• ADV-2009-3159 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 36947 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 20091106 Using Blended Browser Threats involving Chrome to steal files on your computer (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2009-3931](https://trackcve.app/badge/CVE-2009-3931.svg)](https://trackcve.app/cve/CVE-2009-3931)

Record last updated 7 Aug 2024, 06:45 UTC.