Published at LXer:

Google has released version 2.0.172.43 of Chrome 2, a security update fixing three vulnerabilities. A high-severity vulnerability in the V8 JavaScript engine could allow an attacker to run specially-crafted JavaScript on a page, bypassing security checks to read unauthorised memory, or even leading to the execution of arbitrary code. The vulnerability is reportedly contained to the Chrome sandbox. According to Google, for an attack to be successful, a "victim would need to visit a page under an attacker's control". Further details of the vulnerability, however, are currently being withheld until "a majority of users are up to date with the fix".

Read More...