Close
  • Latest News
  • Artificial Intelligence
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Artificial Intelligence
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Applications
    • Applications
    • Cybersecurity

    Google Chrome 29 Update Fixes 25 Flaws, CloudFuzzer Is Big Winner

    By
    Sean Michael Kerner
    -
    August 21, 2013
    Share
    Facebook
    Twitter
    Linkedin

      Google is updating the stable version of its Chrome browser to version 29.0.1547.57 across the Windows, Mac and Linux operating system platforms. The new update includes at least 25 security fixes as well as an improved Omnibox search capability and a new browser reset feature.

      In any given Google Chrome update, Google credits and rewards multiple researchers for their contributions to Chrome security. With the Chrome 29.0.1547.57 release, Google is crediting only four researchers for the discovery of six flaws. Three of those flaws were discovered by a single researcher, working under the alias “cloudfuzzer.”

      In total, Google awarded $6,174 in reward money to the four researchers, with cloudfuzzer pocketing $3,000 of that total. Google recently revealed that it has paid out over $2 million in bug bounties to security researchers since 2010.

      So what did cloudfuzzer find to earn $3,000? cloudfuzzer reported three separate use-after-free errors in Chrome that affect Extensible Stylesheet Language Transformation (XLST), media elements and document parsing. Use-after-free errors occur when allocated memory that is no longer in use is still available as legitimate memory space for an attacker to use to launch an attack. Google is often able to find use-after-free flaws with its own security resources by way of its open-source Address Sanitizer tool.

      Security researcher Krystian Bigaj was awarded $1,337 for reporting an incomplete path sanitization issue, while Alex Chapman was awarded the same amount for an integer overflow issue. Christian Jaeger was awarded $500 for reporting an information leak issue related to overly broad permissions on shared memory files.

      Looking deeper into the Chrome 29 security fixes, Google’s own team spent time on a number of memory hardening initiatives to further improve the security posture of the browser.

      Omnibox

      Security isn’t the only thing that has been updated in the Chrome 29.0.1547.57 stable release. Google is getting back to its core roots with improved search capabilities by way of the Chrome Omnibox. Instead of a separate search window in the browser, Chrome users input Website addresses as well as search queries all in the Omnibox bar of the browser.

      With Chrome 29.0.1547.57, Google is promising that Omnibox suggestions will be improved, delivering better relevancy based on user browser behavior and history.

      Google offers its Chrome users lots of options for customization, which can sometimes lead users down a path they’d like to forget. For those users, Chrome 29.0.1547.57 now enables them to reset all their browser settings to the original defaults.

      In addition to the stable update, Google has also updated its Dev channel early adopter edition to version 30.0.1599.14, providing multiple stability updates. And Chrome Beta for Android is being updated to version 29.0.1547.58, giving mobile users a number of bug fixes.

      Sean Michael Kerner is a senior editor at eWEEK and InternetNews.com. Follow him on Twitter @TechJournalist.

      Sean Michael Kerner
      Sean Michael Kerner is an Internet consultant, strategist, and contributor to several leading IT business web sites.
      Get the Free Newsletter!
      Subscribe to Daily Tech Insider for top news, trends & analysis
      This email address is invalid.
      Get the Free Newsletter!
      Subscribe to Daily Tech Insider for top news, trends & analysis
      This email address is invalid.

      MOST POPULAR ARTICLES

      Latest News

      Zeus Kerravala on Networking: Multicloud, 5G, and...

      James Maguire - December 16, 2022 0
      I spoke with Zeus Kerravala, industry analyst at ZK Research, about the rapid changes in enterprise networking, as tech advances and digital transformation prompt...
      Read more
      Applications

      Datadog President Amit Agarwal on Trends in...

      James Maguire - November 11, 2022 0
      I spoke with Amit Agarwal, President of Datadog, about infrastructure observability, from current trends to key challenges to the future of this rapidly growing...
      Read more
      IT Management

      Intuit’s Nhung Ho on AI for the...

      James Maguire - May 13, 2022 0
      I spoke with Nhung Ho, Vice President of AI at Intuit, about adoption of AI in the small and medium-sized business market, and how...
      Read more
      Applications

      Kyndryl’s Nicolas Sekkaki on Handling AI and...

      James Maguire - November 9, 2022 0
      I spoke with Nicolas Sekkaki, Group Practice Leader for Applications, Data and AI at Kyndryl, about how companies can boost both their AI and...
      Read more
      Cloud

      IGEL CEO Jed Ayres on Edge and...

      James Maguire - June 14, 2022 0
      I spoke with Jed Ayres, CEO of IGEL, about the endpoint sector, and an open source OS for the cloud; we also spoke about...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2022 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×