PT-2003-1189 · Google · Google Toolbar

Publicado 2003-03-18 · Atualizado 2008-09-05 · CVE-2002-1442

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google toolbar version 1.1.58 and earlier

Description The issue allows remote web sites to perform unauthorized operations, including script execution and file reading in other zones, by bypassing the origin verification check. This is done by opening a window to a specific URL, then using script to modify the window's location to the toolbar's configuration URL.

Recommendations For Google toolbar version 1.1.58 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2002-1442

Produtos afetados

Google Toolbar

Referências · 5

• 🔥 http://securityfocus.com/bid/5424 · Exploit
• 🔥 http://online.securityfocus.com/archive/1/286527 · Exploit
• http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0066.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1442 · Nota de Segurança
• http://sec.greymagic.com/adv/gm001-mc · Nota