Google Chrome 4 (Stable) Security Fixes

The Google Chrome developers have just released a new version of Google Chrome 4 that fixes several security issues in the Windows client. Users who have Google Chrome 4 installed are encouraged to update their web browser as soon as possible to protect it from possible exploits targeting those security vulnerabilities.

The Google Chrome Releases blog lists a total of nine security vulnerabilities that have been fixed in the latest stable release of the web browser.

High Race conditions and pointer errors in the sandbox infrastructure.Credit to Mark Dowd, under contract to Google Chrome Security Team.

Low Delete persisted metadata such as Web Databases and STS.Credit to Google Chrome Security Team (Chris Evans) and RSnake of ha.ckers.org.

Medium HTTP headers processed before SafeBrowsing check.Credit to Mike Dougherty of dotSyntax, LLC.

High Memory error with malformed SVG.Credit to wushi of team509.

High Integer overflows in WebKit JavaScript objects.Credit to Sergey Glazunov.

Medium HTTP basic auth dialog URL truncation.Credit to Google Chrome Security Team (Inferno).

Medium Bypass of download warning dialog.Credit to kuzzcc.

High Cross-origin bypass.Credit to kuzzcc.

High Memory error with empty SVG element.Credit to Aki Helin of OUSPG.

Google is still running the monetary compensation program for developers who find security vulnerabilities in the web browser.

The developers have also disabled the experimental anti-reflected-XSS feature called “XSS Auditor” in this release as it caused serious performance issues in some rare cases.

The latest version of Google Chrome can be downloaded directly from the official Google website.

Related Articles:

Author: Martin Brinkmann, Wednesday March 17, 2010 -
Tags:chrome security, google chrome, google chrome security