Google Chrome update fills in parsing bug
Browser engine gets security tune-up
Posted in Operating Systems, 2nd October 2009 12:14 GMT
Free whitepaper – Enabling Datacenter and Cloud Service Management for Mid-Tier Enterprises
Google has published a update to its Chrome browser that addresses a newly discovered high risk security hole.
Chrome version 3.0.195.24 sorts an error in processing long floating point numbers that creates a means for hackers to execute malware within the Google Chrome sandbox. The flaw in the dtoa() component of Chrome's engine is of a type that might lend itself to drive-by download attacks, as explained in Google's advisory here.
Although any malware would only run inside Chrome's sandbox, Google still defines the flaw as "high risk". Security notification firm Secunia goes further and describes the flaw, discovered by Maksymilian Arciemowicz of SecurityReason (advisory here), as "highly critical". ®
Free whitepaper – Enabling Datacenter and Cloud Service Management for Mid-Tier Enterprises
Send corrections
The Register 2007 Tech Barometer
The Impact of IT Security Attitudes
The Register Green Computing Report
Reg Reader Research: SaaS based Email and Office Productivity Tools
Register Research on: Application Platforms
