cybercore
New Member
- Joined
- Jul 7, 2009
Google Chrome Releases: Stable Channel Update
True critical vulnerabilities are rare in Chrome. Chrome on Windows uses a sandbox architecture so that most vulnerability exploits run in the limited sandbox environment and cannot perform any meaningful malicious operations. Not so with these 3.
All 3 vulnerabilities are in the GPU process which is involved in accelerating display in the browser. According to an earlier blog entry that introduced it:
At its core, this graphics work relies on a new process (yes, another one) called the GPU process. The GPU process accepts graphics commands from the renderer process and pushes them to OpenGL or Direct3D (via ANGLE). Normally, renderer processes wouldn't be able to access these APIs, so the GPU process runs in a modified sandbox. Creating a specialized process like this allows Chromium's sandbox to continue to contain as much as possible: the renderer process is still unable to access the system's graphics APIs, and the GPU process contains less logic.
More Chrome Update Plugs 4 Critical Holes
True critical vulnerabilities are rare in Chrome. Chrome on Windows uses a sandbox architecture so that most vulnerability exploits run in the limited sandbox environment and cannot perform any meaningful malicious operations. Not so with these 3.
All 3 vulnerabilities are in the GPU process which is involved in accelerating display in the browser. According to an earlier blog entry that introduced it:
At its core, this graphics work relies on a new process (yes, another one) called the GPU process. The GPU process accepts graphics commands from the renderer process and pushes them to OpenGL or Direct3D (via ANGLE). Normally, renderer processes wouldn't be able to access these APIs, so the GPU process runs in a modified sandbox. Creating a specialized process like this allows Chromium's sandbox to continue to contain as much as possible: the renderer process is still unable to access the system's graphics APIs, and the GPU process contains less logic.
More Chrome Update Plugs 4 Critical Holes