Google fixed security holes with a new release of its stable version of Chrome--then released a replacement shortly afterward to prevent a batch of crashes that turned up as well.
Chrome 1.0.154.64 emerged Tuesday and was intended to fix one critical security problem and one high-severity one. On Thursday, came 1.0.154.65 to fix a crash during startup that affected "a small percentage of users", said Chrome Program Manager Mark Larson.
With the first problem, an attacker under some circumstances could run attack software with the same privilege as the computer user.
With the second, an issue handling 2D graphics could potentially allow a specially crafted image to crash a tab and run an attacker's code within Chrome's sandbox security isolation system.
This article was first published as a blog post on CNET News.












There are currently no comments for this post.