Google comes up with a new version release for its Chrome Browser to fix a high security problem flaw detected with its last version.
The problems affected the Google mainstream version which was stable for quite some time before the new version 1.0.154.159. The update has been done automatically without user intervention and Google itself has built the Chrome.
The security problem, which was made into notice on April 8 by Roi Saltzman of the IBM Rational Application Security Research Group, the spoof allowed cross-site scripting attacks. This short of flaw can make a Web browser process unauthorized code such as JavaScript, enabling a variety of attacks, including impersonation or phishing.
An error in handling URLs with a chromehtml: protocol could allow an attacker to run scripts of his choosing on any page or enumerate files on the local disk under certain conditions.
If a user has Google Chrome installed, visiting an attacker-controlled Web page in Internet Explorer could have caused Google Chrome to launch, open multiple tabs, and load scripts that run after navigating to a URL of the attacker’s choice. Such an attack only works if Chrome is not already running.
