[PCWorks] Google Chrome Multiple Vulnerabilities

  • From: "Clint Hamilton-PCWorks Admin" <PCWorks@xxxxxxxxxxxxxxxxxxxxxxxx>
  • To: "PCWorks@xxxxxxxxxxxxx" <pcworks@xxxxxxxxxxxxx>
  • Date: Thu, 29 Apr 2010 01:12:23 -0500

TITLE:
Google Chrome Multiple Vulnerabilities

Highly critical
Impact:  Security Bypass, System access
Where:  From remote

VERIFY ADVISORY:
http://secunia.com/advisories/39651/

DESCRIPTION:
Some vulnerabilities have been reported in Google Chrome, which 
can
be exploited by malicious people to bypass certain security
restrictions and potentially compromise a user's system.

1) An unspecified error can be exploited to bypass the same 
origin
policy of the Google URL (GURL).

2) An unspecified error within the HTML5 Media handling can be
exploited to cause a memory corruption.

3) An unspecified error within the font handling can be 
exploited to
cause a memory corruption.

SOLUTION:
Update to version 4.1.249.1064.

ORIGINAL ADVISORY:
http://googlechromereleases.blogspot.com/2010/04/stable-update-bug-and-security-fixes.html

=========================
The list's FAQ's can be seen by sending an email to 
PCWorks-request@xxxxxxxxxxxxx with FAQ in the subject line.

To unsubscribe, subscribe, set Digest or Vacation to on or off, go to 
//www.freelists.org/list/pcworks .  You can also send an email to 
PCWorks-request@xxxxxxxxxxxxx with Unsubscribe in the subject line.  Your 
member list settings can be found at 
//www.freelists.org/cgi-bin/lsg2.cgi/l=pcworks .  Once logged in, you have 
access to numerous other email options.  

The list archives are located at //www.freelists.org/archives/pcworks/ .  
All email posted to the list will be placed there in the event anyone needs to 
look for previous posts.
-zxdjhu-

Other related posts: