Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Google Desktop flaw allows data theft
Robert Lemos, SecurityFocus 2007-02-21

Security firm Watchfire warned Google Desktop users on Wednesday to update the program to make certain that they are protected from a vulnerability that could allow an attacker to use JavaScript to search for and steal specific data on a user's system.

Comments Mode:
Google Desktop flaw allows data theft 2007-02-23
Anonymous
This is a useful discovery, and I applaud it. However, the recomendations for mitigation are extreamly narrow in places. For example on a corporate network running Cisco equipment (using CBAC and other acl type application controls) it is possible to disabled application layer javascript, recognise ...

[ more ]  [ reply ]




 

Privacy Statement
Copyright 2009, SecurityFocus