Jump to content

Categories:    Windows      Software      Hardware      Security      Mobile      Internet      Guides
Sponsored Links
Recent Forum Topics
Community Zone
MSFN Guides
Mobile News

MSFN Recommend
AskVG.com Bink Filehorse FreewareFiles Where unprofessional journalism looks better OSNN The Windows Club WinBeta lunarsoft
MSFN Statistics
1.4K
115.6K
129.5K
832.2K
Online
Members
Topics
Replies


Windows News
Google quashes 13 Chrome bugs, adds PDF viewer
Posted on Jan 13 2011 12:08 PM by xper in Software

Google on Thursday patched 13 vulnerabilities in Chrome as it shifted the most stable edition of the browser to version 8. Chrome 8 also debuted Google's built-in PDF viewer, an alternative to the bug-plagued Adobe Reader plug-in, and included support for the still-not-launched Chrome Web Store.

The 13 flaws fixed in Chrome 8.0.552.215 are in a variety of components, including the browser's history, its video indexing and the display of SVG (scalable vector graphics) animations.

Four of the baker's dozen are tagged as "high" level bugs, Google's second-most-serious rating, while five are pegged "medium" and four are labeled as "low."

Google paid $4,000 in bounties to five researchers for reporting vulnerabilities. Since mid-August, Google has handed out over $29,000 in bug bounty payments.

Among the researchers credited with submitting flaws was Nirankush Panchbhai, who works in Microsoft's vulnerability research group. Panchbhai was not one of the researchers paid a bounty.

Per its practice, Google locked its bug tracking database to bar outsiders from reading the technical details of the vulnerabilities. The company usually unlocks access to a flaw at a later date -- sometimes within weeks, often only after months have passed -- to give users time to update before the hacker-useful information goes public.

The update to the "stable" build -- Google maintains three separate "channels" for Chrome, ranging from stable to "beta" to "dev" -- also included an integrated PDF viewer, which Google first introduced to the dev channel last summer. The viewer renders PDF documents as HTML-based pages, and doesn't require Adobe Reader's free browser plug-in, or any of the alternatives.

The PDF viewer operates within Chrome's "sandbox," a security feature that isolates processes to make it more difficult for malware to affect the browser or infect the computer.

Google also added support for the Chrome Web Store to the browser with version 8. Multiple references to the store, which Google announced last May but has yet to take public, appeared in the Chrome 8 release notes.

Download: Google Chrome
Full article: ComputerWorld









Your Comment?

0 Comments