Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Google Desktop flaw allows data theft
Robert Lemos, SecurityFocus 2007-02-21

Security firm Watchfire warned Google Desktop users on Wednesday to update the program to make certain that they are protected from a vulnerability that could allow an attacker to use JavaScript to search for and steal specific data on a user's system.

Submit Comment Mode:
Name:
Subject:
Message:
 
  Enter the characters that appear above
 
Google Desktop flaw allows data theft 2007-02-23
Anonymous
This is a useful discovery, and I applaud it. However, the recomendations for mitigation are extreamly narrow in places. For example on a corporate network running Cisco equipment (using CBAC and other acl type application controls) it is possible to disabled application layer javascript, recognise ...

[ more ]  




 

Privacy Statement
Copyright 2008, SecurityFocus