Google Desktop Input Validation Hole in 'under' Parameter Permits Scripting Attacks
|
|
SecurityTracker Alert ID: 1017686
|
|
SecurityTracker URL: http://securitytracker.com/id?1017686
|
|
CVE Reference: CVE-2007-1085
(Links to External Site)
|
Updated: May 19 2008
|
Original Entry Date: Feb 22 2007
|
Impact: Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, Modification of user information
|
Fix Available: Yes
Exploit Included: Yes
Vendor Confirmed: Yes
|
Version(s): prior to 5.0.0701.30540
|
Description: A vulnerability was reported in Google Desktop. A remote user can conduct scripting attacks in certain situations. This may allow the remote user to gain control of the target user's system.
The Desktop Preferences page does not properly filter HTML code from user-supplied input in the 'under' keyword before displaying
the input.
Note that the 'under' parameter is part of the Advanced Search page, and the contents of this page are included in
the main Desktop Search page but not displayed to the user.
If a cross-site scripting vulnerability is present on any page on
google.com, then a remote user can leverage the google.com cross-site scripting vulnerability to cause arbitrary scripting code
to run in the context of the Google Desktop application. The code will be able to access data on the target user's system and take
actions on the system acting as the target user.
The original advisory is available at:
http://www.watchfire.com/resources/Overtaking-Google-Desktop.pdf
Yair
Amit, Danny Allan, and Adi Sharabani from Watchfire discovered this vulnerability.
|
Impact: A remote user can access data on the target user's system and take actions on the system acting as the target user.
|
Solution: The vendor has reportedly issued a fix. The advisory from Watchfire indicates that version 5.0.0701.30540 contains the fix.
[Editor's
note: At the time of this entry, the Google release notes at http://desktop.google.com/releasenotes.html did not mention either
this version or this vulnerability.]
|
Vendor URL: desktop.google.com/ (Links to External Site)
|
Cause: Input validation error
|
Underlying OS: Windows (2000), Windows (2003), Windows (XP)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Wed, 21 Feb 2007 23:34:30 -0500
Subject: Google Desktop
|
http://www.watchfire.com/resources/Overtaking-Google-Desktop.pdf
|
|
