Google releases Chrome security updates
Published: 09 Sep 2008 08:13 BST
Google has revealed details of two critical-risk vulnerabilities and some lesser issues it says are fixed.
The critical patches relate to buffer overrun vulnerabilities that could have let a remote attacker execute arbitrary software on a Chrome user's computer, said Mark Larson, a Google Chrome program manager, in a mailing list posting on Monday afternoon.
The first patch fixed a vulnerability in handling long file names, called the SaveAs vulnerability, and the second a vulnerability in dealing with the website addresses displayed in Chrome's status area when the user hovers over a link.
Larson also established a Google Chrome Releases blog for announcements and release notes relating to Chrome. The company had said earlier it was working on a way to release that information, in part after people requested such notes after Google started automatically updating Chrome browsers without saying what exactly was in the update.
Google fixed two lesser security issues, too. First was an issue in which typing "about:%" in the address bar could crash the computer. The problem also meant that a web page with that text as a hyperlink could crash the browser if a user hovered the mouse pointer over the link. Second was to prevent the user's desktop from being the default download directory to mitigate "the risk of malicious cluttering of the desktop with unwanted downloads, which can lead to executing unwanted files", Larson said.
Other fixes addressed non-security issues: a JavaScript problem with Facebook; a problem suggesting search terms while using various websites; and some data-transfer issues with the Safe Browsing mode.
For full coverage of the Google Chrome launch, see ZDNet.co.uk's roundup.
An update to Google Chrome means the browser can head off a particular technique that previously could crash the browser
Credit: Google reveals Chrome security patch details from CNET News
- Roundup: Full coverage of Google Chrome
- Blog: Google Chrome has Microsoft's code inside, says MS manager
- Blog: Google Chrome — nine things we've found since launch
- Photos: Highlights of the beta browser
- Leader: Chrome needs more than just sparkle
- Video: Can Chrome shine amid the competition?
- Benchmarks: Google Chrome
- Review: Google Chrome (beta)
- Comment: All roads lead to Chrome
- Video: Google Chrome to open new front in browser war
Did you find this article useful?
7 out of 10 people found this useful
Digg
Slashdot
Del.ici.ous
Stumble
Reddit
