CVE-2002-1442
published 2003-04-11CVE-2002-1442: The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other…
PriorityP422high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.37%
68.9th percentile
The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as "My Computer" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location to the toolbar's configuration URL, which bypasses the origin verification check.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| toolbar | — | — | |
| toolbar | — | — | |
| toolbar | — | — | |
| toolbar | — | — | |
| toolbar | — | — | |
| toolbar | — | — | |
| toolbar | — | — | |
| toolbar | — | — | |
| toolbar | — | — | |
| toolbar | — | — | |
| toolbar | — | — | |
| toolbar | — | — | |
| toolbar | — | — | |
| toolbar | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0066.htmlhttp://online.securityfocus.com/archive/1/286527http://sec.greymagic.com/adv/gm001-mc/http://www.securityfocus.com/bid/5424http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0066.htmlhttp://online.securityfocus.com/archive/1/286527http://sec.greymagic.com/adv/gm001-mc/http://www.securityfocus.com/bid/5424
2003-04-11
Published