Google Chrome CSS Status Bar Spoofing Vulnerability

Release date:
Updated on:

Affected Systems:
Google Chrome 10.0.648.205
Description:
--------------------------------------------------------------------------------
Bugtraq id: 47548

Google Chrome is an Open source web browser developed by Google.

Google Chrome has the status bar spoofing vulnerability during CSS processing. Remote attackers can exploit this vulnerability to display spoofed content in the status bar.

<* Source: xisigr
*>

Test method:
--------------------------------------------------------------------------------

Alert

The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!

Http://xeyeteam.appspot.com/media/agh4ZXlldGVhbXINCxIFTWVkaWEY-cIwDA/spoof_StatusBar.html

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Google
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.google.com