Forums » Software, Gaming & Networking » Operating Systems and Software » Chrome Browser Hacked Wednesday, Patched Thursday

Chrome Browser Hacked Wednesday, Patched Thursday

rated by 0 users
This post has 7 Replies | 3 Followers

Top 10 Contributor
Posts 21,179
Points 943,660
Joined: Sep 2007
ForumsAdministrator
Reply
News Posted: Sun, Mar 11 2012 2:50 PM
Google’s Chrome Browser has historically been relatively bullet-proof, standing up to hacker challenges with impressive resilience. On Wednesday, however, hacker Sergey Glazunov successfully broaches Chrome’s defenses at CanSecWest’s Pwnium challenge, for which he received a prize of $60,000.

To Google’s credit, the vulnerability that Glazunov exploited was patched within 24 hours. In a post on the Chrome Blog, Jason Kersey stated that the hole was patched, and that the Chrome team also delivered some updates to fix issues with Flash games and videos.


Photo credit: ZDNet

However, Glazunov wasn’t the only one to bypass Chrome’s sandbox; French hacking group VUPEN took aim at Chrome first and foremost at CanSecWest’s Pwn2Own event, and apparently, the VUPEN fellows aren’t planning to divulge all their tactics just yet.
  • | Post Points: 65
Top 10 Contributor
Posts 7,900
Points 97,720
Joined: Apr 2009
Location: Shenandoah Valley, Virginia
Moderator
Reply
realneil replied on Sun, Mar 11 2012 3:49 PM

So how long would it have taken Microsoft to patch that vulnerability?

Big Smile

Don't part with your illusions. When they are gone you may still exist, but you have ceased to live.

(Mark Twain)

  • | Post Points: 35
Not Ranked
Posts 2
Points 10
Joined: Mar 2012
Reply
xKennii replied on Sun, Mar 11 2012 5:16 PM

Microsoft NEVER would've patched that venerability

:)

  • | Post Points: 5
Top 100 Contributor
Posts 969
Points 13,875
Joined: Nov 2009
Location: Ontario
Reply
Manduh replied on Sun, Mar 11 2012 8:01 PM

60k, nice! Wish I was that smrt! :p

PCAudioLabs Rok Box MC 7xs - Intel Core i7-2600K - Cooling: PCAL Quiet Operation - Gigabyte Z68 Motherboard - 16GB DDR3-1333 - AMD Radeon HD 5450 - Power Supply: 600 Watts - SRT Drive: Intel 311 SSD (20GB) - Primary Drive: 500GB, 7200RPM, 16MB cache - Audio Drive: 1TB, 7200RPM, 32MB cache - Sample Drive: 2TB, 7200RPM, 64MB cache - OS: Windows 7 Professional x64

  • | Post Points: 5
Top 150 Contributor
Posts 753
Points 8,500
Joined: Mar 2011
Location: Phoenix
Reply
LBowen replied on Sun, Mar 11 2012 8:09 PM

Chrome has become more of my go to browser. Some sites won't display a page on FF for some reason perfectly fine on Chrome. I also think it's really cool how they pay people to find hacks to help secure the software.

"I have the power!!"

  • | Post Points: 5
Top 150 Contributor
Posts 602
Points 5,505
Joined: May 2008
Location: Stockholm
Reply
mhenriday replied on Tue, Mar 13 2012 6:08 AM

LBowen, could you provide an example of pages which won't display on FF, but do on Chrome ? I am a constant user of both FF and Chrome/Chromium versions, but have never encountered this problem - it might also be of interest for Mozilla developers to learn about pages that don't display in their browsers. Personally, I retain FF Nightly as my default browser, primarily because Chrome/Chromium, while excellent browsers and excellently maintained as the quick patching described in the article shows, despite explicit requests from hundreds of users, still refrain from providing us with a sidebar panel which can be toggled on and off (I use it for my Delicious bookmarks)....

Henri

Not Ranked
Posts 3
Points 30
Joined: Apr 2012
Reply
Charles00 replied on Thu, Apr 12 2012 10:25 AM

Microsoft NEVER would've patched that venerability

  • | Post Points: 5
Top 10 Contributor
Posts 4,987
Points 60,195
Joined: May 2008
Location: U.S.
Moderator
Reply
3vi1 replied on Tue, Apr 17 2012 6:24 PM

realneil:

So how long would it have taken Microsoft to patch that vulnerability?

Big Smile

Microsoft Excel Remote Code Execution Exploit - 2280 days (6+ years) between the time Microsoft was informed, and the patch.

 

That is what you get from a monopoly.

What part of "Ph'nglui mglw'nafh Cthulhu R'lyeh wgah'nagl fhtagn" don't you understand?

++++++++++++[>++++>+++++++++>+++>+<<<<-]>+++.>++++++++++.-------------.+++.>---.>--.

  • | Post Points: 5
Page 1 of 1 (8 items) | RSS