Google Chrome And Apple iTunes Users Alert! Govt Warns Of Security Vulnerability

The Indian Computer Emergency Response Team (CERT-In) has issued a warning for Google Chrome and Apple’s iTunes desktop users.

As per CERT-In, the security vulnerability in Google Chrome could allow remote attackers to compromise targeted systems. 

“These vulnerabilities exist in Google Chrome due to the user-after-free error in Visuals & ANGLE (Almost Native Graphics Layer Engine) components; heap buffer overflow in WebAudio; a remote attacker could exploit these vulnerabilities by executing a specially crafted HTML page to trigger heap corruption,” as per CERT-In’s advisory.

CERT-In has also detected a similar issue in Apple’s iTunes app, Digisol Router, Microsoft Edge, among others.

For Apple’s iTunes app, the notification read, “This vulnerability exists in Apple Products due to improper checks in the CoreMedia component. A remote attacker could exploit this vulnerability by sending a specially crafted request.”

Both Google and Apple have addressed security concerns by releasing necessary patches to fix vulnerabilities in their applications. 

This comes days after the Department of Telecommunications (DoT) initiated a major crackdown against the escalating wave of OTP and digital scams in the country. They have directed telecom service providers to block 28,200 mobile handsets allegedly used in nationwide cybercriminal activities.

At the time, the Ministry of Communications said that 20 Lakh mobile numbers were used with these mobile phones. 

With increasing digitisation, there has also been a rise in cybercrimes in the country. The Centre is taking various measures to curb this surge in cybercrimes and financial frauds. 

Last month, the Ministry of Home Affairs (MHA) cybercrime unit introduced the ‘Pratibimb’ app to assist law enforcement agencies and police in tracking cybercriminals in real time and dismantling their networks. Following its launch, Nuh Police utilised the app to arrest around 30 individuals involved in cybercrime cases and seized 50 mobile phones along with 90 fake SIM cards.

In a recent development, DoT unveiled its Digital Intelligence Platform (DIP) aimed at facilitating real-time intelligence sharing and coordination among stakeholders such as telecom service providers, law enforcement agencies, financial institutions, social media platforms, and identity document issuing authorities.

Note: We at Inc42 take our ethics very seriously. More information about it can be found here.