We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,258 News Articles

New Google Chrome beta fixes security bug

Chrome will update automatically

Google has released the third beta version of Google Chrome, the web browser it introduced nearly two months ago.

Google Chrome, which fixes a single security vulnerability and addresses several other problems, will be automatically pushed to current users, said Mark Larson, the browser's product manager. Users who had set Chrome to receive the more frequent developer updates have had most of the fixes and changes in for some time, however.

Larson characterised the one bug patched in the update as a 'medium' threat, and said the fix shut down an address-spoofing flaw that attackers could use to trick users into thinking they were at a safe site when they were actually visiting a malicious or phishing URL.

Google Chrome review

Also integrated into were several non-security fixes as well as a number of design changes. Among the latter: a modification to the way the browser handles downloads of executable files. That change, though designed to block a months-old ‘carpet bomb' bug that could be exploited to dupe users into downloading and launching malware, was criticised last week by the security researcher who reported it to Google as a short-term fix only.

"The best solution was if they just won't download the files until the user approves, or download them to a random directory... as it's done with other browsers, like Internet Explorer's Temporary Internet Files folder or Firefox's random profile directory," said Israeli research Aviv Raff last week.

Google also modified Chrome's site indexing, which the browser uses to call up previously-viewed URLs when users type search criteria in the address bar. "We no longer store data from secure sites (they use https: and show a lock in the address bar) in your history," said Larson in the release notes. "You can still search your history for the site's address, but not the contents on the page."

The search giant has struggled to walk a line between usability and privacy at times. Shortly after it unveiled Chrome, Google was hammered by privacy advocates for recording every keystroke entered into the browser's address bar, then sending some users' data to its servers for examination. Bowing to pressure, Google said it would render that data anonymous within 24 hours.

Other changes Larson pointed out included improvements to Chrome's handling of popular plug-ins, such as Adobe's Flash, Apple's QuickTime and Microsoft's Flash and Windows Media Player. "We fixed issues with video not loading, stopping after a second, and slowing down or freezing Google Chrome (100 percent CPU usage)," said Larson.

Chrome, which is available only for Windows XP and Windows Vista, can be downloaded from Google's website. Current users can wait for the update to download and install automatically, or manually trigger the process by selecting ‘About Google Chrome' from the tools menu.

Google's browser accounted for less than 1 percent of the market during its first month of availability, according to data from Net Applications.

Top stories on PC Advisor:

Windows 7 review

Windows 7 & Windows Azure explained

Google Android: T-Mobile G1 launches in the UK

IDG UK Sites

Three of the most expensive Limited Edition games ever made: Who's buying a $1,000,000 game?

IDG UK Sites

Co-op's Easter egg promo site is an Apple parody

IDG UK Sites

Best Mac: Apple Mac buyers guide for 2015: iMac, MacBook, MacBook Air, MacBook Pro, Mac mini and...