7.5

CVE-2002-1442

Exploit

EPSS 0.68%
Published 11.04.2003 04:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as "My Computer" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location to the toolbar's configuration URL, which bypasses the origin verification check.

Affected products Warnungen 0 Metrics 2 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Google ≫ Toolbar Version1.1.41

Google ≫ Toolbar Version1.1.42

Google ≫ Toolbar Version1.1.43

Google ≫ Toolbar Version1.1.44

Google ≫ Toolbar Version1.1.45

Google ≫ Toolbar Version1.1.47

Google ≫ Toolbar Version1.1.48

Google ≫ Toolbar Version1.1.49

Google ≫ Toolbar Version1.1.53

Google ≫ Toolbar Version1.1.54

Google ≫ Toolbar Version1.1.55

Google ≫ Toolbar Version1.1.56

Google ≫ Toolbar Version1.1.57

Google ≫ Toolbar Version1.1.58

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.68%	0.691

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0066.html

http://online.securityfocus.com/archive/1/286527

Patch

Vendor Advisory

Exploit

http://sec.greymagic.com/adv/gm001-mc/

http://www.securityfocus.com/bid/5424

Patch

Vendor Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2002-1442

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2002-1442

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2002-1442

EUVD