Google Chrome Stable Updated [Security]

Google Chrome web browser stable has been updated to 8.0.552.237 for all platforms. The latest stable release fixes several security vulnerabilities, making it a mandatory update for all Chrome stable users.

The Google Chrome Releases blog lists 16 different vulnerabilities that have been fixed in the new version of which one received the highest rating critical and 13 of high. Sergey Glazunov, the researcher who discovered the critical vulnerability has received the first “elite” Chromium Security Reward, $1337 reward and several other rewards at the same time.

The releases contain the security fixes listed below.

  • [58053] Medium Browser crash in extensions notification handling. Credit to Eric Roman of the Chromium development community.
  • [$1337] [65764] High Bad pointer handling in node iteration. Credit to Sergey Glazunov.
  • [66334] High Crashes when printing multi-page PDFs. Credit to Google Chrome Security Team (Chris Evans).
  • [$1000] [66560] High Stale pointer with CSS + canvas. Credit to Sergey Glazunov.
  • [$500] [66748] High Stale pointer with CSS + cursors. Credit to Jan ToÅ¡ovský.
  • [67100] High Use after free in PDF page handling. Credit to Google Chrome Security Team (Chris Evans).
  • [$1000] [67208] High Stack corruption after PDF out-of-memory condition. Credit to Jared Allar of CERT.
  • [$1000] [67303] High Bad memory access with mismatched video frame sizes. Credit to Aki Helin of OUSPG; plus independent discovery by Google Chrome Security Team (SkyLined) and David Warren of CERT.
  • [$500] [67363] High Stale pointer with SVG use element. Credited anonymously; plus indepdent discovery by miaubiz.
  • [$1000] [67393] Medium Uninitialized pointer in the browser triggered by rogue extension. Credit to kuzzcc.
  • [$1000] [68115] High Vorbis decoder buffer overflows. Credit to David Warren of CERT.
  • [$1000] [68170] High Buffer overflow in PDF shading. Credit to Aki Helin of OUSPG.
  • [$1000] [68178] High Bad cast in anchor handling. Credit to Sergey Glazunov.
  • [$1000] [68181] High Bad cast in video handling. Credit to Sergey Glazunov.
  • [$1000] [68439] High Stale rendering node after DOM node removal. Credit to Martin Barbella; plus independent discovery by Google Chrome Security Team (SkyLined).
  • [$3133.7] [68666] Critical Stale pointer in speech handling. Credit to Sergey Glazunov.

Interested users can find full details about the Chrome changes in the SVN revision log.

As Google Chrome gets updated automatically, most of the users are already running the latest version of Chrome. You can check which version you are running by clicking on the wrench icon wrench icon and clicking on About Google Chrome. If you want you can visit the official download page to download the latest Google Chrome version. You can also download an offline version of Google Chrome from the links that we have shared in one of our earlier posts.

You may also like...