Google patches "severe" Chrome bug : PC Pro

Image via Wikipedia

Google has patched a bug in its Chrome browser that allowed attackers to perform cross-site scripting attacks.

The flaw was discovered earlier this month by an IBM security researcher and was patched last night, with the release of Chrome version 1.0.154.59.


"An error in handling URLs with a chromehtml: protocol could allow an attacker to run scripts of his choosing on any page or enumerate files on the local disk under certain conditions," Chrome program manager Mark Larson explains.

"If a user has Google Chrome installed, visiting an attacker-controlled web page in Internet Explorer could have caused Google Chrome to launch, open multiple tabs, and load scripts that run after navigating to a URL of the attacker's choice. Such an attack only works if Chrome is not already running."

Read more

Read more!

Is Google Chrome In Need of a Polish?

I don't know about you, but after becoming used to Google's highly useful and free tools, I've been left feeling somewhat disappointed with Google Chrome, their new browser.

Image via Wikipedia

I've been an advocate for all things Google, since the brands infancy, and right up to now I have always been wowed by their tools and they have always found their way into my shortcuts.

Google Chrome however, has left me wondering what the fuss has been all about. Most of the functionality we've all become used to of basic browser seem to have been missed by their developers, and there isn't any additional ground breaking functionality which could make up for the loss.

After eagerly awaiting what could have been one of their biggest products to date, I've ended up going back to my original default browser, at least until the guys have had a chance to give Google Chrome a good polish.

Read more!