Chrome Gets 2nd Critical Fix in a Week

In a rare move, Google is updating Chrome for a single security fix.

It's not often that a browser is updated for just a single vulnerability, but that's exactly what is happening with Google Chrome today.

Google has released Chrome Stable 15.0.874.121 for Windows, Mac, Linux and Chrome Frame platforms fixing a single JavaScript flaw. The flaw is identified as CVE-2011-3900 and is rated as being high impact by Google.

The flaw is an out-of-bounds write issue with the Chrome v8 JavaScript Engine. An out-of-bounds write, means that a process has privileges to write, where it should not be able to write. That extra privilege could potentially be exploited by an attacker to execute unauthorized remote code. Google has updated the v8 JavaScript engine to version 3.5.10.24 to correct the flaw.