Mozilla finds Google Chrome flaw

Firefox and Chrome may be rivals in the browser wars, but it hasn't stopped Mozilla from giving Google's security a bit of help.

Google has released a patch for flaws in its Chrome browser, with rival browser company Mozilla given credit for uncovering one of the issues.

Mozilla Security found a flaw in Chrome's V8 Javascript engine that allowed specially created Javascript to read unauthorised memory and bypass security checks.

In the latest post from the Google Chrome blog, the company explained that this could have let attackers access unauthorised data or run malicious code on a user's machine.

Another fix made sure that Google Chrome no longer connected to encrypted HTTPS (SSL) sites that were signed using MD2 or MD4 hashing algorithms, which were considered weak'. If the connections continued, attackers could have forged certificates.

The last issues to be fixed a flaw related to XML, which could have caused a Google Chrome tab process to crash, letting an attacker run malicious code.

Featured Resources

Preparing for AI-enabled cyber attacks

MIT technology review insights

Download now

Cloud storage performance analysis

Storage performance and value of the IONOS cloud Compute Engine

Download now

The Forrester Wave: Top security analytics platforms

The 11 providers that matter most and how they stack up

Download now

Harness data to reinvent your organisation

Build a data strategy for the next wave of cloud innovation

Download now

Recommended

Google breaks from Qualcomm with in-house Pixel 6 chip
system on chip (SoC)

Google breaks from Qualcomm with in-house Pixel 6 chip

3 Aug 2021
Google launches Meet Progressive Web App
video conferencing

Google launches Meet Progressive Web App

2 Aug 2021
Google, Microsoft fight over documents in antitrust lawsuit
Policy & legislation

Google, Microsoft fight over documents in antitrust lawsuit

30 Jul 2021
Google Cloud seeks to abandon its ‘Killed By Google’ reputation
Software

Google Cloud seeks to abandon its ‘Killed By Google’ reputation

27 Jul 2021

Most Popular

RMIT to be first Australian university to implement AWS supercomputing facility
high-performance computing (HPC)

RMIT to be first Australian university to implement AWS supercomputing facility

28 Jul 2021
UK gov considers blocking Nvidia's takeover of Arm
Acquisition

UK gov considers blocking Nvidia's takeover of Arm

4 Aug 2021
Zyxel USG Flex 200 review: A timely and effective solution
Security

Zyxel USG Flex 200 review: A timely and effective solution

28 Jul 2021