In Part 1 it's mentioned that they held up publishing this issue as it affects many other products:
"While these issues are already fixed in Chrome, some of them impact a much broader array of products from a range of companies. So, we won’t be posting that part until we’re comfortable that all affected products have had an adequate time to push fixes to their users."
Presumably this is referring to other webkit browsers and the wordpad.exe exploit. Does anyone know if these problems have been fixed yet?
The wordpad exploit, unless I'm mistaken, is basically just the equivalent of LD_PRELOAD. As such, there's nothing to fix.
This may be of some interest, as it there's some discussion of when it's an exploit and when it's just the way things are supposed to be. http://news.ycombinator.com/item?id=3005832
"While these issues are already fixed in Chrome, some of them impact a much broader array of products from a range of companies. So, we won’t be posting that part until we’re comfortable that all affected products have had an adequate time to push fixes to their users."
Presumably this is referring to other webkit browsers and the wordpad.exe exploit. Does anyone know if these problems have been fixed yet?