7.5high
CVE-2002-1442
The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and fil…
Published 23 y ago · modified 4 mo ago · JSON
CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.4%
percentile 72%
Public exploits
0
none known
Summary
The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as "My Computer" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location to the toolbar's configuration URL, which bypasses the origin verification check.
Exploit prediction (EPSS)
1.37% probability of exploitation in the next 30 days, higher than 72% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
- archives.neohapsis.com /archives/ntbugtraq/2002-q3/0066.html · mailing-list, x_refsource_NTBUGTRAQ, x_transferred
- online.securityfocus.com /archive/1/286527 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securityfocus.com /bid/5424 · vdb-entry, x_refsource_BID, x_transferred
- sec.greymagic.com /adv/gm001-mc/ · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2002-1442
- NVD: CVE-2002-1442
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.