7.5

CVE-2002-1442

Exploit

The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as "My Computer" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location to the toolbar's configuration URL, which bypasses the origin verification check.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Google ≫ Toolbar Version1.1.41
Google ≫ Toolbar Version1.1.42
Google ≫ Toolbar Version1.1.43
Google ≫ Toolbar Version1.1.44
Google ≫ Toolbar Version1.1.45
Google ≫ Toolbar Version1.1.47
Google ≫ Toolbar Version1.1.48
Google ≫ Toolbar Version1.1.49
Google ≫ Toolbar Version1.1.53
Google ≫ Toolbar Version1.1.54
Google ≫ Toolbar Version1.1.55
Google ≫ Toolbar Version1.1.56
Google ≫ Toolbar Version1.1.57
Google ≫ Toolbar Version1.1.58
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.68% 0.691
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
http://www.securityfocus.com/bid/5424
Patch
Vendor Advisory
Exploit