Google Patches 14 Flaws in Chrome 23
Contributed by: Email on 11/06/2012 04:34 PM [ Comments ]
Google has released Chrome 23, the latest version of its browser, which includes fixes for 12 vulnerabilities in the Windows version and two other flaws that are specific only to Mac OS X. The company also handed out $9,000 in rewards to security researchers who reported the vulnerabilities.
Six of the vulnerabilities fixed by Google are rated as high and the rest of the bugs are either medium or low severity. Both of the Mac-specific vulnerabilities fixed in Chrome 23 are high-severity flaws, and each one earned a $1,000 reward for security researcher Miaubiz.
The highest reward went to a researcher named Phil Turnbull, who reported an integer overflow leading to out-of-bounds read in WebP handling. That earned him $3,500 payment. In addition to the bug fixes, Google also included an updated version of Adobe Flash in Chrome 23. Adobe on Tuesday released patches for several vulnerabilities in Flash.
Six of the vulnerabilities fixed by Google are rated as high and the rest of the bugs are either medium or low severity. Both of the Mac-specific vulnerabilities fixed in Chrome 23 are high-severity flaws, and each one earned a $1,000 reward for security researcher Miaubiz.
The highest reward went to a researcher named Phil Turnbull, who reported an integer overflow leading to out-of-bounds read in WebP handling. That earned him $3,500 payment. In addition to the bug fixes, Google also included an updated version of Adobe Flash in Chrome 23. Adobe on Tuesday released patches for several vulnerabilities in Flash.
Comments