Another Google Chrome Security Flaw Identified Print
Written by Rebecca Mints   
Friday, 05 September 2008 10:54

The "SaveAs" problem is a critical buffer-overflow vulnerability that could allow a hacker to perform a remote attack and take complete control of the affected system. Vietnamese security company Bach Khoa Internet Security (BKIS) has found a flaw in Google Chrome 0.2.149.27 and posted details on its Web site. The company says the problem is a critical buffer-overflow vulnerability that could allow a hacker to perform a remote attack and take complete control of the affected system.

 

"The vulnerability is caused due to a boundary error when handling the 'SaveAs' function," BKIS explains on its Web site. "On saving a malicious page with an overly long title (title tag in HTML), the program causes a stack-based overflow and makes it possible for attackers to execute arbitrary code on users' systems."

 

To successfully exploit this vulnerability, an attacker would have to convince someone to visit a malicious page and then attempt to save the page. BKIS says it has submitted the vulnerability to Google, which presumably will address the issue in a future build.