Chrome Security Flaws Begin to Emerge

With all the hype surrounding Google's (GOOG) Chrome browser, it's probably safe to assume that hackers began probing it the moment it was launched.

Now, nearly one week later, Chrome's security vulnerabilities are beginning to emerge.

Perhaps the most serious allows malicious hackers to take over a user's PC to launch remote attacks, according to Bach Khoa, a Vietnamese cyber-security firm.

Calling its discovery "the first critical Chrome vulnerability," the firm described a "boundary error" that occurs when using the browser's "Save As" function to capture a "malicious" Web page.

"To exploit the vulnerability, a hacker might construct a specially crafted Web page, which contains malicious code. He then tricks users into visiting his website and convinces them to save this page. Right after that, the code would be executed, giving him the privilege to make use of the affected system," Back Khoa wrote on its blog.

Google has released a patch addressing the vulnerability, the firm said.

The "Save As" flaw comes after the emergence of an earlier Chrome vulnerability, demonstrated by researcher Aviv Raff, which showed as hackers could plant malware on unsuspecting users' desktops.

This probably isn't the last of the Chrome security flaws to emerge -- the browser is in beta, after all -- but you can rest assured that Google is monitoring the situation closely. The last thing the company wants is for Chrome to gain a reputation for being susceptible to viruses and malware.

Comments

[CrossProfit:]

Read the article, whoopy!

SA editors,
Is this information supposed to effect an investment decision regarding GOOG or competitors?
There are numerous sites that tend to every little detail of companies like GOOG, APPL and a few others. This is not (in our opinion) a major story that will dent GOOG's bottom line and has no business being on SA. We rely on SA editors to filter out articles for us.

Take note!
Thanks,
CrossProfit

2008 Sep 09 06:05 AM

[jack dee:]

Hey Crossprofit, if Chrome fails then GOOGs plans for domination also may fail and thus the bottom line may very well be damaged.

So perhaps you cant see the value of stories relaying information as to the quality of a product but I and many others can.

Nor do I want to trawl through slashdot fan sites keep up todate.

2008 Sep 09 12:56 PM