Filed in archive
google
by noel on December 19, 2007
PC World reports:
The flaw lies in the mechanism Google Toolbar uses to add new buttons on the browser. Because the toolbar does not perform adequate checks when new buttons are being installed, a hacker could make his button appear as though it was being downloaded from a legitimate site when in fact it came from somewhere else. By spoofing the origin of the toolbar button, an attacker could download malicious files or launch a phishing attack against the victim, wrote security researcher Aviv Raff in a blog post on the issue.
Raff has posted proof of concept code, showing how such an attack would work with the Internet Explorer browser.
This error was fixed by Google just hours after Raff notified the company of the problem, but a demo of the flaw being exploited can be seen online.
Permalink: Google Toolbar Flaw Intensifies Online Risks
Tags:
Google+Toolbar
Google
Internet+Explorer
google
search
search+engine
google+toolbar
flaw+intensifies
Trackback: http://publish.creative-weblogging.com/publish/mt-tb.pl/107466
Addthis
Ask
Blinklist
del.icio.us
Digg
Fark
Facebook
Google
Lycos
Ma.gnolia
Mr Wong
Netscape
Netvousz
Newsvine
Reddit
StumbleUpon
Slashdot
Tailrank
Technorati
Wink
Yahoo
Vote for Google Toolbar Flaw Intensifies Online Risks:
|
Rating: 9.67 out of 3 vote(s) cast.
|
Response from:
boris
(12/26/07 9:00am)
This one can be labeled Thanks, but no thanks... Am I better off knowing this if it has been fixed?
Subscribe
Use the search to look for other interesting posts
| RSS |  See all blog subscribe options |
 What is RSS? | |
| Yahoo! |
|
| Addthis |
|
| Bloglines |
|
| Newsletter | |
| Follow us on Twitter! |
