Google has released new security fixes for its Google chrome 2.0.172.43 and has released the same to Stable channel. Below are the fixes :

1) CVE-2009-2935 Unauthorized memory read from Javascript

A flaw in the V8 Javascript engine might allow specially-crafted Javascript on a web page to read unauthorized memory, bypassing security checks. It is possible that this could lead to disclosing unauthorized data to an attacker or allow an attacker to run arbitrary code.

2) Security Fix: Treat weak signatures as invalid

Google Chrome no longer connects to HTTPS (SSL) sites whose certificates are signed using MD2 or MD4 hashing algorithms. These algorithms are considered weak and might allow an attacker to spoof an invalid site as a valid HTTPS site.

3) CVE-2009-2414  Stack consumption vulnerability in libxml2

Stack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allows context-dependent attackers to cause a denial of service (application crash) via a large depth of element declarations in a DTD, related to a function recursion, as demonstrated by the Codenomicon XML fuzzing framework.

4) CVE-2009-2416  Multiple use-after-free vulnerabilities in libxml2

Pages using XML can cause a Google Chrome tab process to crash. A malicious XML payload may be able to trigger a use-after-free condition. Other tabs are unaffected.

Click here for detailed information.

Stay tuned for more.

Advertisements

1) Windows in Netbooks : The early versions of the Chrome operating system will be tailored for Netbooks, a breed of low-cost, less powerful laptop computers that are becoming increasingly popular. However, a vast majority of Netbooks already run on Windows, and that is unlikely to change unless Google can demonstrate the Chrome operating system is a significant improvement, said Forrester Research analyst Paul Jackson.

2) Hardware and app support : One major challenge that could delay adoption is getting makers of printers, networking gear, cameras and other devices to develop software that lets their equipment work with the new Google system. There are more than 2 million software drivers that connect devices to Windows PCs.

3) Windows’ user base : Microsoft’s Windows operating system has been even more dominant for a longer period time despite challenges from Apple Inc and various systems based on Linux, the same type of open-source software that Google plans to use. Analysts feel that people may bitch about Windows, but they are used to it. Windows is almost habit for many. And it is tough to change habits.

4) Chrome’s ‘limited’ success  :The new operating system is based on a product from Google that has had limited success: the Chrome browser. As of February, it claimed 1.2 per cent market share, compared to nearly 70 per cent for Microsoft’s browser, according to researcher Net Applications.

5)  Microsoft Bing and more : Analysts also had a warning for Google, cautioning the company’s executives against letting their foray into the PC desktop distract them from the company’s core search and advertising business, where Microsoft is making progress.  Bing, launched June 3 to generally positive reviews, handled 8.23 per cent of US Web searches in June, up from 7.21 per cent in April, according to Internet data firm StatCounter.

6) Web as backbone : Similarly, analysts wonder if applications that could once only run on local computers will reliably work on the Web. For, as everyone knows Web has been a disruptive technology, but then it is not always reliable. Network connections can be slow, or non-existent, and any functions that require frequent connections have the possibility of letting users down.

Source: Indiatimes

Google today announced the Chrome OS (operating system) for desktops and notebooks throwing a direct challenge to Microsoft’s Windows operating system family. This Linux kernel based operating systems has its roots in Google’s Chrome browser and is different from Android. Google will be launching the Chrome OS for netbooks in second half of 2010.

Basically, Google Chrome OS is intended for those who would want to carry out their regular computing needs via the Internet; it will be designed for ultra portable netbooks as well as full-size desktop systems. This means, the Chrome OS will run on x86 and ARM processors based systems. Google pleads to not confuse the Chrome OS with Android. The Android OS has been designed to work on a variety of devices and platforms like from smartphones to set top boxes

For more information you can visit (Source http://www.techtree.com)