Main Menu
Network
Sponsor
Top 10 Sites
Partners
|
|
Top Submit newsSubscribe 
Communication | Computer Crime | Digital Audio, Video, Photo | General News | Hardware | Internet | Mobile | PDA | Security | Software | Vulnerability |
Previous articleBack to news listNext article
| Sponsored links | Want to become one of our authors and see your work published on ALLSeek.iNFO ?
| | Google Desktop Search Discloses Local Search Integration Results to Remote Users |
|---|
Categorie: Vulnerability
Posted: 2004-12-22 by ReCall
Views: 384
Source: Click here
| Current Rating: Not rated
|
| | Details |
|---|
Description: A vulnerability was reported in Google Desktop Search. A remote user can access the local search integration results on the target user's system.
Dan Wallach reported that a remote user can create a Java applet that, when loaded by the target user, will execute queries to the remote server that served the Java applet that appear to the Google Desktop Search application to be valid Google queries, causing the search application to integrate the local search results with the information returned by the remote server that served the Java applet. The applet running on the target user's system will then have access to the integrated local search results and can forward those results to the remote server.
A similar exploit method exists using Javascript instead of Java.
These attacks work only if the target user has enabled local search integration (via the Preferences menu).
The flaw was discovered as part of a research project by Seth Fogarty and Seth Nielson (Rice graduate students), advised by Dan Wallach (a Rice professor).
The original technical report is available at:
http://seclab.cs.rice.edu/gdesktop-tr-dec04.pdf
Impact: A remote user can access the local search integration results on the target user's system.
Solution: The vendor has released a fixed version (121004) as of December 10, 2004.
| | Syndication |
|---|
Permalink Email this
The URI to TrackBack this entry is:
http://allseek.info/news/trackback.php?id=1244
| | User comments (post your comments ) |
|---|
Only registerd members can post comments and articles
|
| Previous articleBack to news listNext article
|
|
|
|
InterJOB.su
|
