06 Jun 08 More Chrome Security Flaws

Since Google Chrome is still officially, “beta”, there will be a lot of security flaws and bugs that need to be fixed.

I heard about a security flaw where users are not promoted before downloading last week and Google has fixed it but here’s another one found by a company:

Vietnamese security company Bach Khoa Internet Security (BKIS) has found a flaw in Google Chrome 0.2.149.27 and posted details on its Web site. The company says the problem is a critical buffer-overflow vulnerability that could allow a hacker to perform a remote attack and take complete control of the affected system.

Here’s the proof of concept code:

An issue exists in how chrome behaves with undefined-handlers in chrome.dll version 0.2.149.27. A crash can result without user interaction. When a user is made to visit a malicious link, which has an undefined handler followed by a ’special’ character, the chrome crashes with a Google Chrome message window “Whoa! Google Chrome has crashed. Restart now?”. It crashes on “int 3″ at 0×01002FF3 as an exception/trap, followed by “POP EBP” instruction when pointed out by the EIP register at 0×01002FF4.

I am sure Google will get this little bug fixed real soon but in the meanwhile, you can send any bugs you find to: tips [at] chrome-hacks.net.

via informationweek Tags:bach khoa, bkis, buffer overflow vulnerability, bugs, Chrome Security Flaws/Bugs, complete control, crash, crashes, ebp, google, hacker, hacks, internet security, little bug, message window, proof of concept, security company, security flaw, security flaws

03 Jun 08 Google Chrome Hack – 3D Pipe Screensaver and more!

For starters, goto your Chrome Browser and type, “about:internets“.  Now, that’s a cool 3D Pipe app.  I don’t know why it’s there but it’s always cool to find new things about the Google Chrome Browser.

I am sure there’s more hacks, if you find them, please send them to tips [at] chrome-hacks.net.

Here’s a couple more:

about:version – version info on Google Chrome
about:stats
about:memory
about:plugins
about:histograms
about:cache
about:dns
about:crash - will show the pitiful crash icon

via stikiflem Tags:3d pipe, cool 3d, crash, google, Google Chrome Hacks, hack, hacks, histograms, memory, starters