« NebuAd's CEO Packs His Bags | Main | O.k. Maybe NebuAd IS Close to the Brink »
September 4, 2008
Older Webkit Confers Vulnerability on Chrome
Google’s new browser uses an older version of Webkit that includes a disagreeable vulnerability. Colleague Andy Patrizio noted it last night:
“The security site SecuriTeam has found a serious weakness in Chrome’s handling of malicious code. Chrome uses an older version of WebKit, the open-source browser technology also used in Apple’s Safari browser, that includes the vulnerability.
“Chrome has a download progress bar that, when clicked, will execute the file that has just been downloaded. If it’s an executable, a window will pop up, warning the user about downloading malicious code. But if it’s a Java archive file, a .JAR, it will run it with no warning.
“Another vulnerability, which has a proof of concept on the site Evil Fingers, makes it possible to craft a specific link to crash the browser.”
(Link)
Posted by mhall at 11:43 AM | Add Comment
Leave a comment