Google Chrome 1.0 Update Patches 2 Security Flaws, Adds New Features
Chrome 1.0, the stable version of Google’s take on how a web browser should look and feel, has been updated; Chrome 1.0.154.64 is a security update meant to fix two problems that plagued the web browser, but it also comes with two new offerings. Out of the two security holes, one has been given the rating “high”, the other has been ranked as “critical”. You are well advised to update your browser and stay safe while surfing the web, which we all know is riddled with all sorts of threats.
Starting with the security holes, Chrome 1.0.154.64 has fixed the following problems:
- CVE-2009-1441: Input validation error in the browser process. This critical security vulnerability could allow a person with malicious intent to crash the Chrome browser and run arbitrary code on the targeted machine, with logged user privileges.
- CVE-2009-1442: Integer overflow in Skia 2D graphics. This high security vulnerability refers to the fact that a tab could crash by means of a specially crafted image or canvas due to failure to check the result of integer multiplication when computing image sizes. A person with malicious intent could thus run arbitrary code within Chrome’s sandbox.
Security aside, here are the two new offerings that Chrome 1.0.154.64 has to offer:
- Google Gears version 0.5.16.0 (new version).
- New startup notification. When you are asked if you would like to set Chrome as your default browser, you can now activate the “Don’t ask again” option.
In related Chrome news, Google had to recently fix an issue within the browser because it did not play well with Microsoft’s Internet Explorer (IE). The issue in question referred to the fact that visiting malicious web pages via IE could permit an attacker to launch Chrome and run scripts on the targeted machine (details here).
Starting with the security holes, Chrome 1.0.154.64 has fixed the following problems:
- CVE-2009-1441: Input validation error in the browser process. This critical security vulnerability could allow a person with malicious intent to crash the Chrome browser and run arbitrary code on the targeted machine, with logged user privileges.
- CVE-2009-1442: Integer overflow in Skia 2D graphics. This high security vulnerability refers to the fact that a tab could crash by means of a specially crafted image or canvas due to failure to check the result of integer multiplication when computing image sizes. A person with malicious intent could thus run arbitrary code within Chrome’s sandbox.
Security aside, here are the two new offerings that Chrome 1.0.154.64 has to offer:
- Google Gears version 0.5.16.0 (new version).
- New startup notification. When you are asked if you would like to set Chrome as your default browser, you can now activate the “Don’t ask again” option.
In related Chrome news, Google had to recently fix an issue within the browser because it did not play well with Microsoft’s Internet Explorer (IE). The issue in question referred to the fact that visiting malicious web pages via IE could permit an attacker to launch Chrome and run scripts on the targeted machine (details here).
