Google Toolbar Dialog Spoofing Vulnerability

Google Toolbar Dialog Spoofing Vulnerability

Google Toolbar is prone to a dialog-spoofing vulnerability.

An attacker can exploit this issue by crafting a URI that contains a open redirector.

Successfully exploiting this issue may allow the attacker to convince an unsuspecting victim to install malicious custom buttons onto the victim's toolbar. This may lead to a false sense of trust and may also aid in phishing attacks. Other attacks are also possible.

This issue affects these versions:

Google Toolbar 5 beta for Internet Explorer
Google Toolbar 4 for Internet Explorer
Google Toolbar 4 for Firefox

Other versions running on different browsers may also be affected.