Chrome 4.0 released, addresses several security vulnerabilities

Google has released an updated version of its Chrome web browser to address several vulnerabilities, which could allow an attacker to execute arbitrary code, according to an advisory from US-CERT.

Chrome 4.0.249.78 for Windows addresses 13 vulnerabilities, six of which are rated “high” in severity, two rated “medium” and five rated “low”, according to Google's release notes. The vulnerabilities could also be leveraged by an attacker to obtain sensitive information, bypass security restrictions, or cause a denial-of-service attack, the advisory said.

Several of the vulnerabilities rated high in severity involve memory errors when drawing on canvases or decoding images. Other high-severity vulnerabilities involve a “cross-domain access error” and “bitmap deserialization error”, Google said.

Besides the bug fixes, the updated browser also includes support for a security feature called “Strict Transport Security”, which requires the browser to access websites using secure connections, such as HTTPS, Google said.

The updated browser also includes several other new features, including extensions, which allow users to customise the browser's features, and bookmark sync, which enables users to synchronise their bookmarks on multiple computers.

See original article on scmagazineus.com