Thursday, September 4, 2008
With Google's new browser jusy days old, web security researchers are continuing to take the shine off Chrome.
One new network security vulnerability identified by analyst Rishi Narang allows malicious coders to crash the browser by crafting a specially designed link which a user is invited to visit.
Launched on Tuesday in a Beta release, Chrome was designed specifically to stablise the web-surfing experience. It has drawn praise from a number of quarters for its use of process-based tabs to isolate specific threats such as unstable websites.
However, posting details on evilfingers.com, Narang insists that the exploit causes the entire browser to stop functioning.
To back up his findings, he included a proof-of-concept link with the posting.
Yesterday, network security researchers also discovered that Chrome was vulnerable to the same widely publicised carpet-bombing exploit that affected Apple's Safari browser.
A report from ZDNet detailed how web security expert Aviv Raff was able to exploit a Java development kit used by Chrome to launch executable files arbitrarily on compromised systems.
Related News:
Scammers skulking on social networking sites - 11.11.2008
Criminals are increasingly turning to social networking sites to commit identity theft and fraud, it has been claimed.
Voting 'needs a paper trail' - 11.4.2008
As Americans head to the polls today, one research team has warned that different types of electronic voting machines used throughout the country all have their own vulnerabilities.
Microsoft in legal battle over piracy 'nagware' - 10.30.2008
A Chinese citizen has filed a civil lawsuit against Microsoft after the Windows Genuine Advantage software was installed on his computer as part of an automatic update.
Analyst finds SQL flaw in Google Adwords - 10.30.2008
There could be a resurgence in the number of attacks launched through Google services, one analyst has claimed.
Microsoft patches ahead of Windows 7 pre-beta launch - 10.28.2008
Microsoft yesterday (October 27th) issued a patch for a network security vulnerability identified in the pre-beta version of the Windows 7 operating system.
