Google has updated its Chrome browser to fix a critical bug that could allow an attacker to execute malicious code on a user's system.
The update also fixes a bug that could allow the execution of malicious JavaScript code.
Chrome 3.0.195.32, released on Thursday, fixes a bug in the browser's implementation of the Gears SQL application programming interface (API) that could allow a malicious Web site to crash the Gears plug-in and possibly execute malicious code on a user's system, Google said in an advisory.
Gears is a Google-directed open-source project that enables offline support and other features for Web applications.
The bug could allow a malicious site to use the Gears SQL API to maliciously craft SQL metadata, which could cause a memory corruption, Google said. This could cause the Gears plug-in to crash or possibly allow the execution of malicious code.
Read more of "Google fixes risky Chrome bugs" at ZDNet UK.











There are currently no comments for this post.