Tejeddine Mouelhi
  • Home
  • My blog
  • My publications
  • About my research
  • Java programs
  • Pictures
  • pagex

Google chrome attack

5/18/2011

0 Comments

 
A security company VUPEN claims that they were able to successfully perform an attack on Google chrome. According to them v11.0.696.68 and v12.0.742.30. Their attack bypasses the sandbox security mechanisms, and works on Windows 7, 64 bits which has the data execution prevention (DEP) and address space layout randomisation (ASLR) security features.
VUPEN does not give any details on the exploits. They did not even share it with google, which is very unusual. and surprising. They say that they are sharing the exploits with their goverment customers. This is not clear whetther they meant that they are sharing the exploit or the vulnerability and the way to protect from.
This means that there is out there a 0dayvunerability that allows to hack into your system just by visiting a malicious website.
0 Comments

    Author

    Dr. Tejeddine Mouelhi
    Expert in IT security & security/software testing

    View my profile on LinkedIn

    Archives

    April 2020
    August 2018
    June 2016
    July 2015
    July 2013
    October 2012
    March 2012
    November 2011
    May 2011
    April 2011
    July 2010
    April 2010
    January 2010
    November 2009
    September 2009
    August 2009
    May 2009
    March 2009
    February 2009

    Categories

    All
    All
    Application Security
    Funny
    Research
    Security Blog
    Worth Reading

    RSS Feed

Powered by Create your own unique website with customizable templates.
  • Home
  • My blog
  • My publications
  • About my research
  • Java programs
  • Pictures
  • pagex