Google Closed Leak Of Information In PDF Reader Chrome

There is a new version of Google Chrome appeared where one vulnerability has been eliminated, as well as multiple vulnerabilities in embedded Flash Player. The vulnerability was an information leak in the PDF reader in Chrome. Besides Flash Player browser also has a built-in PDF reader.

Details on the vulnerability Google will not disclose if enough users have installed the new version. However, the leak has been labeled as 'high'. In this case, a malicious website could read confidential data from other websites or modify. The vulnerability was discovered by Rob Wu, who was awarded $ 4,000. It is also added the Flash Player to Chrome this week appeared. Update to Chrome 46.0.2490.86 happens on most systems automatically.

Tip: Adobe Reader Lets You Open Any Embedded Files

In recent weeks, cyber criminals several times PDF files sent which was hiding a malicious Word document. Once users opened the PDF file they were asked if they wanted to open the embedded Word document.

The Word document contains another macro that installed malware on the computer. The macro is executed only if users set it, but in practice this is an effective method of attack. Users and administrators can easily avoid, however, Adobe Reader opens these embedded documents, says Didier Stevens, handler at the Internet Storm Center. Through the Trust Manager, available via the settings of the PDF reader option can be switched off, as Stevens Also in this video shows.

Tor Browser Enhances Privacy And YouTube Support

For Internet users who want to protect their anonymity and privacy on the web is a completely new version of Tor Browser appeared. It is the first version of Tor Browser 5.0 . Besides several vulnerabilities that are fixed This version contains several measures to protect user privacy.

For example, there are added protective measures to prevent identification on the basis of key strokes. The NoScript whitelist is reset. NoScript is a Firefox extension that prevents the execution of scripts on websites. NoScript uses a whitelist of domains where scripting is allowed. The reason for the reset is that NoScript previous updates certain areas were added to the whitelist. To avoid repetition NoScript will not be able to update the whitelist. Further supporting the playback of HTML5 video on YouTube improved.

Zero day

Tor Browser is based on Firefox. Recently, a zero-day flaw was used in the PDF reader Firefox to attack users. According to the Tor Project, the developer of Tor Browser, the problem was not present in version 4.5 of Tor Browser. Users of the trial version of Tor Browser 5.0 were vulnerable. However, the attack could not be carried out if the security slider Tor Browser stood tall. The browser has recently acquired a slider that allows users to specify the security level. Updating to the new versions of Tor Browser via the browser or Torproject.org . Globally, 2.5 million people use the Tor network.