2

Google engineers claim that Chrome PWN bug is a Flash bug

view full story
linux-howto

http://www.zdnet.com – Yesterday I reported that security firm VUPEN claimed to have a Google Chrome browser exploit that bypassed the browser’s sandbox and Windows ASLR and DEP security measures. Today Google engineers are claiming that the bug isn’t with Chrome itself but in the Flash player bundled with the browser. (General)

dayu's picture
Submitted by dayu on 05/11/2011 – Made popular on 05/11/2011

Stories similar to Google engineers claim that Chrome PWN bug is a Flash bug

Google just launched an update to Chrome for Android that provides the browser with a strengthened sandbox. Google says this will help ensure that malicious mobile sites remain contained and can’t impact the entire browser. It’s worth noting, though, that this enhanced sandbox will only be available to Android 4.1 Jellybean users.

If you’ve been using Google Chrome and feeling smug that you’re browser is immune to being attacked, think again.

Capita anche ai migliori. Ebbene sì, la nota società di sicurezza VUPEN è riuscita nell’intento di bucare il browser di casa Google sui sistemi della famiglia Windows.

Adobe’s Flash Player has come under fire from developers and companies who question its necessity, but the plug-in has just received a big vote of confidence from Google. This week, Google announced that its Chrome browser will come with Flash built in. And Google, Adobe, and another browser maker, Mozilla, have revealed plans to improve the [...]

“For Flash Player releases after 11.2, the Flash Player browser plugin for Linux will only be available via the “Pepper” API as part of the Google Chrome browser distribution and will no longer be available as a direct download from Adobe.

Just updated to 4.1 Jellybean and now Chrome will not display any flash content (used to on 4.0). BUT, If I use the built in 'Browser', it DOES display flash content, so obviously flash player still works.

Is this a google thing? I wouldn't have thought so, as I'd expect them to nobble it on the internal browser too, but you never know.

The stable branch of Google Chrome, a browser built on the WebKit layout engine that aims to be minimalistic and versatile at the same time, is now at version 23.0.1271.91.

Google Chrome 23.0.1271.91 has introduced a large number of changes and fixes into the stable branch, improving the security and functionality of the browser.

Highlights of Google Chrome 23.0.1271.91:

• The Flash conten

Ubuntu 12.10 comes with Mozilla Firefox by default, it’s a great browser! but if you want a secondary web browser (or you like Google Chrome) then can also try Chromium (the open source project upon which Google chrome is based on) – it’s available there in Ubuntu Software Center, but you won’t get some chrome specific features such as in built flash player etc.

With the release of beta versions of its Chrome browser for the Mac and Linux platforms, Google looks to be laying the groundwork for becoming a major player in the next wave of computing.