DonationCoder.com forum
 
Read-only archive. This is a static copy of the DonationCoder.com forum. Reading and searching work as before; logging in, posting and private messages do not.
Archive of 2026-10-21 · About this archive · Main site

« previous next »
Pages: [1]

Author Topic: New Gmail vulnerability  (Read 6,795 times)

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,931
    • Gathering Badge
    • Plugin Coding Medal
    • Participated in NANY Challenge Seventeen Times
    • Cody Award
    • Coding Snacks
    • Volunteers/Staff
New Gmail vulnerability
« on: March 02, 2006, 05:31 PM »
http://www.neowin.net/index.php?act=view&id=32435

Quote
"javascript will run if it is withing the preview of the message" meaning that hackers could grab email addresses or possibly steal cookies and compromise Google accounts. It's surprising that this vulnerability existed and who knows how long this has been a hole.

apparently the hole was first discovered/reported by a 14yr old on his blog :)

allen

  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 1,206
    • Participated in NANY Challenge Once
    • Cody Award
    • Programming School - Deluxe Bonus Medal
    • Military Service Badge - US Navy
    • Linux User
    • Writer
Re: New Gmail vulnerability
« Reply #1 on: March 03, 2006, 02:05 AM »
I can't reproduce it . . . I'm guessing it's either fixed or depends on browser.  He didn't say what he was using . . .

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,931
    • Gathering Badge
    • Plugin Coding Medal
    • Participated in NANY Challenge Seventeen Times
    • Cody Award
    • Coding Snacks
    • Volunteers/Staff
Re: New Gmail vulnerability
« Reply #2 on: March 03, 2006, 02:23 AM »
they probably fixed it by now, it's making the rounds on all the announcement sites.

allen

  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 1,206
    • Participated in NANY Challenge Once
    • Cody Award
    • Programming School - Deluxe Bonus Medal
    • Military Service Badge - US Navy
    • Linux User
    • Writer
Re: New Gmail vulnerability
« Reply #3 on: March 03, 2006, 04:41 AM »
Cool.
The things kids find these days.

Rover

  • Master of Smilies
  • Charter Member
  • Joined in 2005
  • ***
  • Posts: 633
    • Linux User
Re: New Gmail vulnerability
« Reply #4 on: March 03, 2006, 05:24 AM »
Insert Brilliant Sig line here
« previous next »
Pages: [1] • top

Original address: https://www.donationcoder.com/forum/index.php?topic=2619.0