Google plugs 15 security holes in its latest Chrome browser

The high-risk flaws being fixed include URL bar spoofing with view-source; use-after-free in SVG filters, Range handling, and bidi handling; out-of-bounds write in v8 i18n handling; and buffer overflow in PDF font handling.

Google doled out $6,000 in bug bounties to researchers, with $2,000 going to Arthur Gerkis, $1,500 to Atte Kettunen of Oulu University Secure Programming Group (OUSPG), $1,000 each to Mitja Kolsek of OUSPG and Slawomir Blazek, and $500 to Aki Helin of OUSPG.

In addition, Google Chrome 16 offers multiple account sync, which enables the addition of new users to each installation of the browser. Each individual user can sign in to Chrome and sync their settings, extensions, and other add-ons to the web, giving each person a separate experience.

"Keep in mind that adding new users to Chrome isn’t intended to secure your data against other people using your computer, since it just takes a few clicks to switch between users. We’re providing this functionality as a quick and simple user interface convenience for people who are already sharing Chrome on the same computer today", Tim Steele, a Google software engineer, wrote in a blog post.
 

What’s hot on Infosecurity Magazine?