Sindows 7
join:2006-09-13
Hope, BC
| Google Chrome vulnerable to carpet-bombing flaw
Google’s shiny new Web browser is vulnerable to a carpet-bombing vulnerability that could expose Windows users to malicious hacker attacks.
Just hours after the release of Google Chrome, researcher Aviv Raff discovered that he could combine two vulnerabilities — a flaw in Apple Safari (WebKit) and a Java bug discussed at this year’s Black Hat conference — to trick users into launching executables direct from the new browser.
Raff has cooked up a harmless demo of the attack in action, showing how a Google Chrome users can be lured into downloading and launching a JAR (Java Archive) file that gets executed without warning.
»blogs.zdnet.com/security/?p=1843 |
|
zteardrop
join:2005-12-20
Brooklyn, NY | Amusing. Everyone, especially GOogle thinks they are smarter than Microsoft. It will take them years to build a Secure browser. |
|
hpguru
Curb Your Dogma
Premium
join:2002-04-12 | reply to Sindows 7
But, but, but isn't Google's shiny new Chrome the Browser you can trust?
Oh, nevermind. My bad. |
|
SUMware
Premium
join:2002-05-21 | reply to Sindows 7
Already posted: »Google Chrome vulnerable to carpet-bombing flaw |
|
sMh
join:2003-08-24 | reply to Sindows 7
Ticking the "Ask where to save each file before downloading" option puts a stop to this flaw. |
|
daveinpoway
Premium
join:2006-07-03
Poway, CA | reply to Sindows 7
A good reason not to get involved with Beta software (no matter who put it out). Wait for the final version (which will almost certainly still have flaws, but at least many of them will have been corrected). |
|
