Google buffs Chrome with security update

sjb007 · 05-09-2009, 01:33 AM

Google has pushed out an update for its Chrome browser that lances two vulnerabilities, one of which it defines as critical.

The critical flaw involves a failure to properly validate input from a renderer (tab) process. Successful exploitation of the flaw might allow the injection of hostile code onto vulnerable systems, hence the critical tag.
Click here to find out more!

The second "high risk" flaw involves problems in calculating image size. The security bug creates a means for hackers to crash vulnerable systems, for example after tricking users into visiting malicious constructed websites.

Both flaws are explained in more depth in an advisory by Google here. It's the second time in two weeks that Google has updated its browser software in response to a security problem. A previous update - issued on 23 April - addressed an unrelated lower-risk security bug.

Google Chrome contains a background updating function so the browser will update itself to the latest version, Chrome 1.0.154.64, unbeknownst to most users. ®

http://www.theregister.co.uk/2009/05...curity_update/

05-09-2009, 01:33 AM	#1 (permalink)
sjb007 Analyst, Security Team Join Date: Dec 2007 Location: Lincoln UK Posts: 2,231 OS: Windows 7 Premium x64 My System	Google buffs Chrome with security update Google has pushed out an update for its Chrome browser that lances two vulnerabilities, one of which it defines as critical. The critical flaw involves a failure to properly validate input from a renderer (tab) process. Successful exploitation of the flaw might allow the injection of hostile code onto vulnerable systems, hence the critical tag. Click here to find out more! The second "high risk" flaw involves problems in calculating image size. The security bug creates a means for hackers to crash vulnerable systems, for example after tricking users into visiting malicious constructed websites. Both flaws are explained in more depth in an advisory by Google here. It's the second time in two weeks that Google has updated its browser software in response to a security problem. A previous update - issued on 23 April - addressed an unrelated lower-risk security bug. Google Chrome contains a background updating function so the browser will update itself to the latest version, Chrome 1.0.154.64, unbeknownst to most users. ® http://www.theregister.co.uk/2009/05...curity_update/ __________________ If we have helped you then please consider donating Proud Member of ASAP & UNITE Since 2007