Multiple bugs in Google Chrome

[John Connor]

http://www.securitytracker.com/id/1034801

[FONT=Arial, Helvetica][SIZE=-1]Description: Multiple vulnerabilities were reported in Google Chrome. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can bypass security controls on the target system. A remote user can obtain potentially sensitive information on the target system. A remote user can spoof URLs.

[/SIZE][/FONT]

 

[mikeymikec]

Business as usual in browserville.

 

[KeithP]

I don't know about you guys but I am going back to I.E. 6 before it's too late!

-KeithP

 

[mikeymikec]

I don't know about you guys but I am going back to I.E. 6 before it's too late!

I bet that hardly any vulnerabilities are being found in IE6 any more; it must be perfect

 

[PliotronX]

I bet that hardly any vulnerabilities are being found in IE6 any more; it must be perfect

Let's take it a step further

 

[Elixer]

Hey wait a minute...

Is it still a vulnerability if you know that they track things you do, but you don't care, since it isn't windows 10?

Description: Multiple vulnerabilities were reported in Google Chrome. Google can cause arbitrary code to be executed on the target user's system. Google can bypass security controls on the target system. Google can obtain potentially sensitive information on the target system. Google can spoof URLs.

Everyone install lynx, that will show 'em who is boss!

 

[PliotronX]

Hey wait a minute...

Is it still a vulnerability if you know that they track things you do, but you don't care, since it isn't windows 10?



Everyone install lynx, that will show 'em who is boss!

I laughed I wonder what one of those "update Flash now" popups would look like in Lynx :sneaky:

 

[John Connor]

So far no Pale Moon exploits. Interesting...

 

[mikeymikec]

So far no Pale Moon exploits. Interesting...

Maybe you should read the PM release notes:

"Ported all security updates from Mozilla that are applicable/relevant to our code base (up to and including all security issues made known to us until now). Considering v26 has been kept updated over its long development until release, the list of fixes/CVEs would be too exhaustive to list in these release notes individually."

 

[John Connor]

The point is has Chrome fixed theirs?

 

[mikeymikec]

The point is has Chrome fixed theirs?

From the URL you posted:

[FONT=Arial, Helvetica][SIZE=-1]Fix Available: Yes Vendor Confirmed: Yes

[/SIZE][/FONT]

 

[TheRyuu]

http://www.securitytracker.com/id/1034801

[/SIZE][/FONT]

How is this any different from the normal updates that they release[1]. Firefox[2] and Edge/IE[3] aren't any different. Neither is Windows[4] for that matter.

Chrome is still the most secure browser in my mind and has the best sandboxing and defense in depth mitigations by far.

[1] http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html
[2] https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox/#firefox44
[3] https://technet.microsoft.com/library/security/MS16-002
[4] https://technet.microsoft.com/en-us/library/security/ms16-Jan

 

[John Connor]

Well, I know there is a vulnerability with Chrome and smartphones. It could be Android 4.4 or something, forgot. But with a popular browser, now superseding Firefox, like Winblows there will be more exploits.

 

[TheRyuu]

Well, I know there is a vulnerability with Chrome and smartphones. It could be Android 4.4 or something, forgot. But with a popular browser, now superseding Firefox, like Winblows there will be more exploits.

That doesn't make Firefox and Linux more secure than Chrome and Windows respectively.

Firefox's defense in depth is a joke (it has none) and Linux has some problems as well (which can be fixed with grsecurity). It's also important to look at the scope of the bug/exploit (e.g. does it escape the Chrome sandbox).

Windows is very likely a more secure desktop operation system than linux (or I should say default desktop linux distributions) based on how Windows can isolate applications from each other on the desktop (this is changing/has changed on linux thanks to wayland though, x11 was a nightmare).