Google Closes Six Security Holes with Chrome Update
Posted on by Derek Erwin
The Google team has updated its Chrome web browser to version 23.0.1271.97 for Mac and other operating systems, fixing multiple high-level vulnerabilities. Google awarded $4,500 in cash to the security researchers who provided information about the security holes covered in this software update. This build fixes six vulnerabilities altogether and also has a new version of Adobe Flash. You can find the security details for Flash Player here.
The following flaws were fixed in this latest version of Google Chrome:
- CVE-2012-5139: Use-after-free with visibility events
- CVE-2012-5140: Use-after-free in URL loader
- CVE-2012-5141: Limit Chromoting client plug-in instantiation
- CVE-2012-5142: Crash in history navigation
- CVE-2012-5143: Integer overflow in PPAPI image buffers
- CVE-2012-5144: Stack corruption in AAC decoding
Google’s Chrome browser updates automatically, or you can download Google Chrome to install the newest version.