Google closes three vulnerabilities in Chrome 2

Posted by Scott_Ruecker on Aug 26, 2009 8:47 PM EDT
Heise
Mail this story
Print this story

Google has released version 2.0.172.43 of Chrome 2, a security update fixing three vulnerabilities. A high-severity vulnerability in the V8 JavaScript engine could allow an attacker to run specially-crafted JavaScript on a page, bypassing security checks to read unauthorised memory, or even leading to the execution of arbitrary code. The vulnerability is reportedly contained to the Chrome sandbox. According to Google, for an attack to be successful, a "victim would need to visit a page under an attacker's control". Further details of the vulnerability, however, are currently being withheld until "a majority of users are up to date with the fix".

Full Story

  Nav
» Read more about: Story Type: News Story

« Return to the newswire homepage

This topic does not have any threads posted yet!

You cannot post until you login.