Skip Links

Network World

Security Blog

Chrome gets a ding

By SecurityBlog on Wed, 09/03/08 - 7:29am.
Newsletter Signup

Like the dread of getting a ding in that new car, Google experienced its first ding with its much hyped Chrome browser. While the new Internet surfing tool does a good job of sandboxing applications running in tabs and tries to keep a lid on memory use, researchers have found a flaw in the WebKit engine Chrome uses. The WebKit is vulnerable to a carpet bombing attack that could land a malicious Java JAR file on a victim's machine in two seemingly harmless clicks.

The good news is this is the same vulnerability that plagued Apple's Safari browser and there's a patch available for that, so Google should be able to polish Chrome up pretty quickly. That said, I am sure there will be more dings down the road given the high profile nature of the application and its creator.

Welcome, visitor. Register Log in
About SecurityBlog
SecurityBlog is written by Network World Multimedia Editor Jason Meserve.