14 DAY TRIAL // A few days ago, experts revealed that a clickjacking vulnerability in Flash Player, that was fixed by Adobe a long time ago, could still be leveraged in Chrome to hijack users’ webcams and microphones.
Google has addressed the issue with the release of the latest stable channel update for Chrome.
Chrome 27.0.1453.116 for Windows, Macintosh and Chrome Frame platforms addresses the security hole that could have been leveraged by hackers to trick users into allowing them to access the target’s webcam and microphone.
A clever proof-of-concept published by security researcher Egor Homakov showed that an attacker could have tricked users into pressing the “Allow” button in the Flash Player settings window.
The Flash plugin clickjacking vulnerability fixed in the latest version of Chrome allowed an attacker to make the settings window transparent.
Update. Adobe representatives have clarified for The Register that Google is responsible for addressing the issue.
Chrome for Windows is available for download here Chrome for Mac is available for download here Chrome for Linux is available for download here