topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • Sunday December 15, 2024, 12:53 am
  • Proudly celebrating 15+ years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Author Topic: New Gmail vulnerability  (Read 5288 times)

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,914
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
New Gmail vulnerability
« on: March 02, 2006, 11:31 AM »
http://www.neowin.ne...ct=view&id=32435

"javascript will run if it is withing the preview of the message" meaning that hackers could grab email addresses or possibly steal cookies and compromise Google accounts. It's surprising that this vulnerability existed and who knows how long this has been a hole.

apparently the hole was first discovered/reported by a 14yr old on his blog :)

allen

  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 1,206
    • View Profile
    • Donate to Member
Re: New Gmail vulnerability
« Reply #1 on: March 02, 2006, 08:05 PM »
I can't reproduce it . . . I'm guessing it's either fixed or depends on browser.  He didn't say what he was using . . .

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,914
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
Re: New Gmail vulnerability
« Reply #2 on: March 02, 2006, 08:23 PM »
they probably fixed it by now, it's making the rounds on all the announcement sites.

allen

  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 1,206
    • View Profile
    • Donate to Member
Re: New Gmail vulnerability
« Reply #3 on: March 02, 2006, 10:41 PM »
Cool.
The things kids find these days.

Rover

  • Master of Smilies
  • Charter Member
  • Joined in 2005
  • ***
  • Posts: 633
    • View Profile
    • Donate to Member
Re: New Gmail vulnerability
« Reply #4 on: March 02, 2006, 11:24 PM »
Insert Brilliant Sig line here