| | site-map | e-mail

User:

Guest

Name: Password:

www.center.hu / Archive / Security news / february, 2005 / Google Desktop Search information disclosure vulnerability 

Google Desktop Search information disclosure vulnerability

Google Desktop Search information disclosure vulnerability

Date Discovered: December 20, 2004
Date Published: January 29, 2005
Last Updated: January 29, 2005

Vulnerability ID: 32092
Discovered by: Dan Wallach
Exploitable Locally: No
Exploitable Remotely: Yes
Impact: Remote attackers can gain privileged information.
Root Cause: Software Vulnerability

Google Desktop Search contains a vulnerability that can allow a remote attacker gain privileged information. Remote attackers can create a specially crafted Java applet that is loaded by a target user to trick the Google desktop search program into inserting searching integration results into attacker´s web site.

Recommendations

Technical Recommendation Reference - 32092
Upgrade to the latest version of the Google Desktop Search:

http://desktop.google.com/


Vendor reference:

http://www.google.com/

Affected Technologies

Google: Google Desktop Search

Source : Computer Associates International
www.ca.com

2005-02-01 12:54

Back