Software

Google Chrome

software:google_chrome Also: Chrome

Google browser that detected a fraudulent Google certificate and used certificate pinning.

Explore relationships

Mentioned in

Relationships

Direction Predicate Other entity Origin EP
incoming USES public key pinning Explicit 3
incoming AFFECTS use-after-free Explicit 82
incoming OTHER Vupen Explicit 82
incoming ASSOCIATED_WITH Junghoon Lee Attributed 82
incoming USES Alex Explicit 84

Claims

public key pinning USES Google Chrome

Google used public key pinning in Chrome to accept only certificates issued from Google's CA and detect the DigiNotar certificate.

Explicit Confidence 98% · Jack Rhysider EP 3 Details

“They forced Chrome to only accept certificates issued from Google’s CA, essentially pinning the certificate to a specific CA.”

Jack Rhysider · offsets 22843–22968

use-after-free AFFECTS Google Chrome

Vupen’s Chrome exploit chain used a use-after-free in Google’s renderer process.

Explicit Confidence 98% · Brian Gorenc EP 82 Details

“they’re exploiting a use-after-free in Google’s renderer process.”

Brian Gorenc · offsets 11795–11860

Vupen OTHER Google Chrome

Vupen demonstrated an exploit chain against Google Chrome at Pwn2Own in 2014.

Explicit Confidence 98% · Brian Gorenc EP 82 Details

“Vupen was – at the contest was targeting Google Chrome.”

Brian Gorenc · offsets 11387–11442

Junghoon Lee ASSOCIATED_WITH Google Chrome

Forbes reportedly described Junghoon Lee, also known as Lokihardt, as able to hack Google Chrome.

Attributed Confidence 90% · Jack Rhysider EP 82 Details

“Lee, better known as his online alias Lokihardt is said to be able to hack into any computer, smart phone, program, or browser from Apple iPhone to Microsoft Edge, Google Chrome, or Safari.”

Jack Rhysider · offsets 22716–22905

Alex USES Google Chrome

Alex used Google Chrome to begin researching the boarding pass.

Explicit Confidence 99% · Alex EP 84 Details

“I opened up Google Chrome and just started typing in the bar at the top”