CVE-2002-1443 The Google toolbar 1.1.58 and earlier allows remote web sites to monitor a user's input into the toolbar via an "onkeydown" event handler.
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Google toolbar 1.1.58 and earlier allows remote web sites to monitor a user's input into the toolbar via an "onkeydown" event handler.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google toolbar | = 1.1.41 | No fix listed |
| Google toolbar | = 1.1.42 | No fix listed |
| Google toolbar | = 1.1.43 | No fix listed |
| Google toolbar | = 1.1.44 | No fix listed |
| Google toolbar | = 1.1.45 | No fix listed |
| Google toolbar | = 1.1.47 | No fix listed |
| Google toolbar | = 1.1.48 | No fix listed |
| Google toolbar | = 1.1.49 | No fix listed |
| Google toolbar | = 1.1.53 | No fix listed |
| Google toolbar | = 1.1.54 | No fix listed |
| Google toolbar | = 1.1.55 | No fix listed |
| Google toolbar | = 1.1.56 | No fix listed |
| Google toolbar | = 1.1.57 | No fix listed |
| Google toolbar | = 1.1.58 | No fix listed |
References
- 20020808 Exploiting the Google toolbar (GM#001-MC) mailing-list
- 20020808 Exploiting the Google toolbar (GM#001-MC) exploit mailing-list patch vendor-advisory
- sec.greymagic.com
- toolbar.google.com
- 5426 exploit patch vdb-entry vendor-advisory
- google-toolbar-keypress-monitoring(10054) vdb-entry