Google Chrome Impacted by New Magellan 2.0 Vulnerabilities
by Fnord666 from SoylentNews on (#4X5WA)
upstart writes in with an IRC submission for SoyCow1337:
Google Chrome impacted by new Magellan 2.0 vulnerabilities:
A new set of SQLite vulnerabilities can allow attackers to remotely run malicious code inside Google Chrome, the world's most popular web browser.
The vulnerabilities, five, in total, are named "Magellan 2.0," and were disclosed today by the Tencent Blade security team.
All apps that use an SQLite database are vulnerable to Magellan 2.0; however, the danger of "remote exploitation" is smaller than the one in Chrome, where a feature called the WebSQL API exposes Chrome users to remote attacks, by default.
Read more of this story at SoylentNews.