Google Chrome patched for the second time in a month

published 23 June 2009

Google Chrome has been patched to fix a critical security issue as well as a couple of other networking bugs.

This comes only around a week-and-a-half after Google Chrome needed to fix flaws in WebKit its open source browser engine.

The Google security team found a critical flaw that made Chrome vulnerable to a buffer overflow when handling particular responses from HTTP servers.

The issue could have allowed a specially crafted response from a server to crash the browser and allow an attacker to run code on a victim's computer.

Google said more details of the flaw would be made available once the majority of users were up to date with the fix.

However, Chris Evans of Chrome Security did say that the bug was in Chrome's browser kernel, and that it was doing a lot of internal code auditing, fuzzing and reviewing around the problem.