CVE

Id
10901  
CVE No.
CVE-2004-2475  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web script via about.html in the About section. NOTE: some followup posts suggest that the demonstration code"s use of the res:// protocol does not cross privilege boundaries, since it is not allowed in the Internet Zone. Thus this might not be a vulnerability.  
Phase
Assigned (20050820)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
76190 10901 CVE-2004-2475 BUGTRAQ:20040917 GoogleToolbar:About -- Allows Script Injection  View
76191 10901 CVE-2004-2475 URL:http://archives.neohapsis.com/archives/bugtraq/2004-09/0226.html  View
76192 10901 CVE-2004-2475 FULLDISC:20040918 Re: GoogleToolbar:About -- Allows Script Injection  View
76193 10901 CVE-2004-2475 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0629.html  View
76194 10901 CVE-2004-2475 FULLDISC:20040918 Re: GoogleToolbar:About -- Allows Script Injection  View
76195 10901 CVE-2004-2475 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0639.html  View
76196 10901 CVE-2004-2475 BID:11210  View
76197 10901 CVE-2004-2475 URL:http://www.securityfocus.com/bid/11210  View
76198 10901 CVE-2004-2475 OSVDB:10037  View
76199 10901 CVE-2004-2475 URL:http://www.osvdb.org/10037  View
76200 10901 CVE-2004-2475 SECTRACK:1011351  View
76201 10901 CVE-2004-2475 URL:http://securitytracker.com/id?1011351  View
76202 10901 CVE-2004-2475 XF:google-toolbar-about-code-execution(17435)  View

Related JVN