toggle

AAPL Stock: 121.3 ( -1.07 )

Printed from http://www.macnn.com

Google patches first major Chrome exploit

updated 09:45 am EST, Fri March 9, 2012

Google Chrome gets immediate security patch

Google sent word that it had already patched the Chrome exploit demonstrated in CanSecWest's Pwn2Own side contest, Pwnium. Linux, Mac, and Windows versions, along with the Chrome Frame plugin for Internet Explorer, should all be secure today. It's now known to have involved universal cross-site scripting and "bad history navigation," although wider details wouldn't be published until most users of Chrome and other WebKit-using browsers like Safari were using secure versions.

The exploit was credited to one Vupen team member, Sergey Glazunov, who gets the $60,000 price Google and CanSecWest organizers had arranged.

Finding the particular exploit was a milestone for Google, as it represented the first real crack to break Chrome's sandboxing. Google has encouraged white hat hackers to try and break Chrome and help it improve security, but it has also argued that Chrome was inherently safer and touted the lack of attacks as proof its sandboxing worked.

The Chrome exploit breaks a minor tradition of Pwn2Own hacks being targeted against Apple first, such as against the iPhone 4 or desktop Safari.




by MacNN Staff

toggle

Comments

  1. testudo

    Joined: Dec 1969

    +1

    duh

    although wider details wouldn't be published until most users of Chrome and other WebKit-using browsers like Safari were using secure versions.

    So it's a WebKit issue, not a Chrome issue, per se?

    The exploit was credited to one Vupen team member, Sergey Glazunov, who gets the $60,000 price Google and CanSecWest organizers had arranged...
    The Chrome exploit breaks a minor tradition of Pwn2Own hacks being targeted against Apple first, such as against the iPhone 4 or desktop Safari.


    Minor tradition vs. 60k? Gee, that's not a hard choice.

Login Here

Not a member of the MacNN forums? Register now for free.

toggle

Network Headlines

Follow us on Facebook

toggle

Most Popular

Advertisement

Recent Reviews

HP 14-x030nr 14-inch Chromebook

If you're like us, chances are you've come to realize that you need the ability to access the Internet on the go. Also, you've prob ...

15-inch MacBook Pro with Force Touch

Apple's 15-inch Retina MacBook Pro continues to be a popular notebook with professional users and prosumers looking for the ultimate ...

Typo keyboard for iPad

Following numerous legal shenanigans between Typo -- a company founded in part by Ryan Seacrest -- and the clear object of his physica ...

toggle

Most Commented