Google Blogoscoped

Forum

Google Chrome includes two security fixes too

Juha-Matti Laurio [PersonRank 10]

Friday, January 30, 2009
15 years ago2,351 views

CVE-2009-0276: Javascript same-origin bypass vulnerability
and older ones, CVE-2007-0048 and CVE-2007-0045: Workaround for Adobe Reader Plugin ppen parameters cross-site scripting vulnerability

Link:
http://googlechromereleases.blogspot.com/2009/01/stable-beta-update-yahoo-mail-and.html

The severity level of the first vulnerability is High and the severity of two Adobe Reader vulnerabilities is Moderate.

Juha-Matti Laurio [PersonRank 10]

15 years ago #

Security company Secunia's severity is Moderately critical (i.e. 3/5), their advisory is located at
http://secunia.com/advisories/33754/

Juha-Matti Laurio [PersonRank 10]

15 years ago #

There is a typo included in the text:
ppen parameters cross-site scripting -> open...

Juha-Matti Laurio [PersonRank 10]

15 years ago #

And the non-affected Chrome version is: 1.0.154.46

Forum home

Advertisement

 
Blog  |  Forum     more >> Archive | Feed | Google's blogs | About
Advertisement

 

This site unofficially covers Google™ and more with some rights reserved. Join our forum!