Stable Channel has been updated to 33.0.1750.146 for Windows, Mac, and Linux.
Security Fixes and Rewards
This update includes 19 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the Chromium security page for more information.
[$1000][344492] High CVE-2013-6663: Use-after-free in svg images. Credit to Atte Kettunen ofOUSPG.
[$500][326854] High CVE-2013-6664: Use-after-free in speech recognition. Credit to Khalil Zhani.
[$2000][337882] High CVE-2013-6665: Heap buffer overflow in software rendering. Credit to cloudfuzzer.
[332023] Medium CVE-2013-6666: Chrome allows requests in flash header request. Credit to netfuzzerr.
As usual, our ongoing internal security work responsible for a wide range of fixes:
[348175] CVE-2013-6667: Various fixes from internal audits, fuzzing and other initiatives.
[343964, 344186, 347909] CVE-2013-6668: Multiple vulnerabilities in V8 fixed in version 3.24.35.10.
Many of the above bugs were detected using AddressSanitizer.
This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log. If you find a new issue, please let us know by filing a bug.
Download: Google Chrome 33.0.1750.146 | 800 KB (Freeware)
Download: Google Chrome portable | 1.4 MB
View: Chrome Website
