Google fixes 'critical' security hole in Chrome

By Juan Carlos Perez, IDG News Service |  Security, Chrome, Google Add a new comment

Google has plugged a security vulnerability in its Chrome browser that the company considers critical.

The latest Chrome release -- version 2.0.172.33 -- fixes an issue that could let a malicious hacker carry out a buffer overflow attack, Google said Monday in an official blog.

If successful, the attack could allow the hacker to crash the browser and run code on a compromised machine with the privileges of the logged-on user.

To exploit the vulnerability, the hacker would have to involve "a specially crafted response from an HTTP server," according to Google, which didn't go into more specifics in the blog posting.

Google plans to provide more details about the vulnerability once a majority of Chrome users have patched their browsers. Chrome's internal security team discovered the flaw.

This latest version also fixes other bugs, including Chrome crashes when loading some HTTPS sites.

    Add a comment

    Post a comment using one of these accounts
    Or join now
    At least 6 characters

    Note: Comment will appear soon after you have activated your account.
    Obscene/spam comments will be removed and accounts suspended.
    The information you submit is subject to our Privacy Policy and Terms of Service.

    ITworld LIVE

    SecurityWhite Papers & Webcasts

    White Paper

    Overcome Top 7 Admin Challenges of Active Directory

    As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable, enforceable processes that reduces administrative overhead and enables robust, customizable reporting and auditing capabilities. Brought to you by NetIQ.

    White Paper

    Insiders Can Ruin Your Company. Take Action.

    Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in organizations worldwide. This white paper from NetIQ, discusses key technology solutions that help to prevent and detect insider threats.

    White Paper

    Top Solutions and Tools to Prevent Devastating Malware

    Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring (FIM) tools that provide immediate alerts. This white paper has been brought to you by NetIQ, the leader in solving complex IT challenges.

    White Paper

    Streamline Compliance and Increase ROI

    Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will help your business gain the maximum return on investment possible while aligning your compliance programs.

    White Paper

    X-Ray of the PCI Process-4 Proactive Steps

    This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into creating a compliant and secure IT environment. Follow these four proactive steps now before your next audit. Brought to you by NetIQ.

    See more White Papers | Webcasts

    Ask a question

    Ask a Question