CVEvulnerability

CVE-2002-1442

7.5 HIGH Published 2003-04-11 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-04-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as "My Computer" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location to the toolbar's configuration URL, which bypasses the origin verification check.

Affected configurations

• google toolbar 1.1.41 • google toolbar 1.1.42 • google toolbar 1.1.43 • google toolbar 1.1.44 • google toolbar 1.1.45 • google toolbar 1.1.47 • google toolbar 1.1.48 • google toolbar 1.1.49 • google toolbar 1.1.53 • google toolbar 1.1.54 • google toolbar 1.1.55 • google toolbar 1.1.56 • google toolbar 1.1.57 • google toolbar 1.1.58

References