Chrome exploit lets malware launch apps

[djbaxter]

Google Chrome exploit lets malware launch apps
Windows Secrets Newsletter
February 14, 2009

If you use Google Chrome, make sure you update to version 1.0.154.48 (download page). Or perhaps you should consider an alternative browser ? for now, anyway. Like all new software, Chrome is plagued by dangerous bugs.

An anonymous researcher known as "waraxe" published a proof-of-concept exploit allowing a bad guy to build a Web page that launches a program on your system when you visit it. Waraxe's exploit simply and harmlessly opens a copy of Windows Calculator, just to prove that such inroads are possible.

Even though this bug has been patched, your best defense at this point is to leave Chrome alone. The browser is not ready for prime time. Wait at least a year before using Chrome as your primary browser.

 

[DJMC]

Minstrel......that sounds like someone trying to destroy Chrome's reputation.

I've been using Chrome for FOUR MONTHS now.

It has never crashed, nor has it picked up any Malware!

Internet Explorer & FireFox are not usable on my computer--- they both crash constantly. IE crashes when you open, FF crashes after 5 mins.

Chrome is the fastest, most stable browser I've ever experienced.

Too bad all this bad-mouthing is keeping the TRUTH from getting out!







PS: where's my sig? Its been two days now!

 

[Linda Buquet]

DJMC I pmed you about your sig.

 

[djbaxter]

Minstrel......that sounds like someone trying to destroy Chrome's reputation.

I've been using Chrome for FOUR MONTHS now.

It has never crashed, nor has it picked up any Malware!

Internet Explorer & FireFox are not usable on my computer--- they both crash constantly. IE crashes when you open, FF crashes after 5 mins.

Chrome is the fastest, most stable browser I've ever experienced.

Too bad all this bad-mouthing is keeping the TRUTH from getting out!

The truth IS getting out and no, this is not random Chrome bashing. Chrome is built on the frame of a MAC browser and has been plagued with security issues since it's inception.

If you insist on using it in it's present beta form, (1) make sure you have good real-time updated antivirus and other anti-malware software installed and configured correctly, and (2) make sure you keep up to date with the latest Chrome releases addressing those vulnerabilities.

As I have said many times, anyone who thinks that ANY browser is secure is living in a dream world.