Chrome suffers first security flaw
In an article on the Securiteam site, Rishi Narang from Evilfingers says a crash can occur without user interaction. If a user is provided a malicious link with an undefined handler followed by a special character, Chrome crashes.
In Google-speak, the browser displays a message "Whoa, Google Chrome has crashed. Restart now?"
Narang found the fault in chrome.dll version 0.2.149.27. More details can be found on this Evilfingers page.
And on Tuesday, mere hours after Chrome was released, researcher Aviv Raff concocted a proof-of-concept demo to show how the Google browser could be made vulnerable to a carpet-bombing flaw and thus open a window for ill-intentioned hackers.
http://news.cnet.com/8301-1009_3-10031250-83.html?tag=txt
0 Response to "Chrome suffers first security flaw"
Posting Komentar