I am using Google's Chrome browser under Linux (Ubuntu) 64 bit for web browsing.
If I a virus uses for example a leak in the flash player, the virus will get the privileges of the user who started the browser, in my case a normal non-admin user.
- Each tab in chrome is separated in a different process and I know that applications are directly prevented from modifying each other's memory addresses because they can't see it. So if I have two tabs open. In one tab there is my twitter login page, in the other tab there is the malicious website with the flash malware. If the tab (process) with the flash player gets infected by the virus, is the virus separated from the tab (process) where my twitter login is? This would mean that the virus can only sneak passwords etc. in the tab (process) where the virus exists. If I will use my Twitter password in the other tab, the password is only in the memory of this tab and cannot be seen by the infected tab (process) right?
- Another point is the sandbox of google chrome. If the virus uses a leak in the flash player to control the process where this tab is executed, what can this virus do? I think a successful usage of a plugin leak will bring the virus only in the sandbox and what can it do inside this sandbox? Can it read my personal data from my home folder, or sneaking passwords I use in the browser?