Mozilla finds Google Chrome flaw

Firefox and Chrome may be rivals in the browser wars, but it hasn't stopped Mozilla from giving Google's security a bit of help.

Google has released a patch for flaws in its Chrome browser, with rival browser company Mozilla given credit for uncovering one of the issues.

Mozilla Security found a flaw in Chrome's V8 Javascript engine that allowed specially created Javascript to read unauthorised memory and bypass security checks.

In the latest post from the Google Chrome blog, the company explained that this could have let attackers access unauthorised data or run malicious code on a user's machine.

Another fix made sure that Google Chrome no longer connected to encrypted HTTPS (SSL) sites that were signed using MD2 or MD4 hashing algorithms, which were considered weak'. If the connections continued, attackers could have forged certificates.

The last issues to be fixed a flaw related to XML, which could have caused a Google Chrome tab process to crash, letting an attacker run malicious code.

Featured Resources

Digital document processes in 2020: A spotlight on Western Europe

The shift from best practice to business necessity

Download now

Four security considerations for cloud migration

The good, the bad, and the ugly of cloud computing

Download now

VR leads the way in manufacturing

How VR is digitally transforming our world

Download now

Deeper than digital

Top-performing modern enterprises show why more perfect software is fundamental to success

Download now

Recommended

Latest Chrome and Chrome OS updates fix zero-day flaw
bugs

Latest Chrome and Chrome OS updates fix zero-day flaw

23 Oct 2020
Microsoft spearheads industry-wide charter against AI cyber attacks
Security

Microsoft spearheads industry-wide charter against AI cyber attacks

23 Oct 2020
Weekly threat roundup: Chrome, Citrix and WordPress
Security

Weekly threat roundup: Chrome, Citrix and WordPress

23 Oct 2020
IT services giant Sopra Steria falls victim to Ryuk ransomware
Security

IT services giant Sopra Steria falls victim to Ryuk ransomware

23 Oct 2020

Most Popular

The top 12 password-cracking techniques used by hackers
Security

The top 12 password-cracking techniques used by hackers

5 Oct 2020
The enemy of security is complexity
Sponsored

The enemy of security is complexity

9 Oct 2020
What is a 502 bad gateway and how do you fix it?
web hosting

What is a 502 bad gateway and how do you fix it?

5 Oct 2020