PT-2003-1189 · Google · Google Toolbar

Published 2003-03-18 · Updated 2008-09-05 · CVE-2002-1442

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google toolbar version 1.1.58 and earlier

Description The issue allows remote web sites to perform unauthorized operations, including script execution and file reading in other zones, by bypassing the origin verification check. This is done by opening a window to a specific URL, then using script to modify the window's location to the toolbar's configuration URL.

Recommendations For Google toolbar version 1.1.58 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2002-1442

Affected Products

Google Toolbar

References · 5

• 🔥 http://securityfocus.com/bid/5424 · Exploit
• 🔥 http://online.securityfocus.com/archive/1/286527 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1442 · Security Note
• http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0066.html · Note
• http://sec.greymagic.com/adv/gm001-mc · Note