Security Flaw Discovered in Google Toolbar

Jimmy 2004 · Dec 19, 2007, 05:01 PM

A security flaw has been discovered in Google's Toolbar which could allow criminals to steal data or install malicious software onto people’s computers. The flaw works by exploiting the toolbar’s ability to install new buttons, and allows a hacker to potentially disguise malicious code as a legitimate button due to the fact that the toolbar does not perform adequate checks when buttons are being installed. To become a victim of the vulnerability, a user would have to be tricked into clicking a link which would open a new popup window asking them to install a custom button, which appears to be installed from a legitimate site such as Google. It then needs to be run from the toolbar, and a user would have to agree to downloading and running an executable. Given the number of steps involved, the flaw is not being treated as critical, and Google is already working on a fix for the problem.

Source: Yahoo! News

hacker111 · Dec 19, 2007, 05:33 PM

This is very surprising. Google usually has good security on there website.

Kreij · Dec 19, 2007, 05:51 PM

It's not on their web site, it's in the BHO that you can download for your browsers.

DaMulta · Dec 19, 2007, 05:58 PM

Thanks for telling them Yahoo! News....

Google Toolbar FTW spell Check

TheGuruStud · Dec 20, 2007, 12:22 AM

Quote:

Originally Posted by DaMulta

Thanks for telling them Yahoo! News....

Google Toolbar FTW spell Check

Dec 19, 2007, 05:01 PM	#1
Jimmy 2004 Eligible for custom title Join Date: Jan 2005 Location: England Posts: 5,047 (1.66/day) Thanks: 134 Thanked 276 Times in 185 Posts System Specs	Security Flaw Discovered in Google Toolbar A security flaw has been discovered in Google's Toolbar which could allow criminals to steal data or install malicious software onto people’s computers. The flaw works by exploiting the toolbar’s ability to install new buttons, and allows a hacker to potentially disguise malicious code as a legitimate button due to the fact that the toolbar does not perform adequate checks when buttons are being installed. To become a victim of the vulnerability, a user would have to be tricked into clicking a link which would open a new popup window asking them to install a custom button, which appears to be installed from a legitimate site such as Google. It then needs to be run from the toolbar, and a user would have to agree to downloading and running an executable. Given the number of steps involved, the flaw is not being treated as critical, and Google is already working on a fix for the problem. Source: Yahoo! News

System Name:	Jimmy 2004's PC
Processor:	S754 AMD Athlon64 3200+ @ 2640MHz
Motherboard:	ASUS K8N
Cooling:	AC Freezer 64 Pro + Zalman VF1000 + 5x120mm Antec TriCool Case Fans
Memory:	1GB Kingston PC3200 (2x512MB)
Video Card:	Saphire 256MB X800 GTO @ 450MHz/560MHz (Core/Memory)
Hard Disk:	500GB Western Digital SATA II + 80GB Maxtor DiamondMax SATA
Optical Drive:	LiteOn DVD & NEC DVD+/-RW DL
CRT/LCD Model:	Digimate 17" TFT (1280x1024)
Case:	Antec P182
Sound Card:	Audigy 4 + Creative Inspire T7900 7.1 Speakers
PSU:	Corsair HX520W
Software:	Windows XP Home

Dec 19, 2007, 05:51 PM	#3
Kreij Hardcore Monkey Moderator Join Date: Feb 2007 Location: Cheeseland (Wisconsin, USA) Posts: 12,114 (5.27/day) Thanks: 591 Thanked 5,492 Times in 2,936 Posts System Specs	It's not on their web site, it's in the BHO that you can download for your browsers. __________________ Cloud (noun, singular): A dynamic arrangement of multiple potential single points of failure, with a user at one end and their data at the other. Get more tech news on a wide variety of topics at NextPowerUp

Processor:	Intel Core 2 Quad QX9650 Extreme @ 3.0 GHz
Motherboard:	Asus Rampage Formula
Cooling:	ZeroTherm Nirvana NV120 Premium
Memory:	8GB (4 x 2GB) Corsair Dominator PC2-8500
Video Card:	2 x Sapphire Radeon HD6970
Hard Disk:	2 x Seagate Barracuda 320GB in RAID 0
Optical Drive:	Sony DRU-120C DVD-RW
CRT/LCD Model:	Dell 3007WFP 30" LCD (2560 x 1600)
Case:	Thermaltake Armor w/ 250mm Side Fan
Sound Card:	SupremeFX 8ch Audio
PSU:	Thermaltake Toughpower 750W Modular
Software:	Win8 Pro x64 / Cat 12.10

Dec 19, 2007, 05:58 PM	#4
DaMulta My stars went supernova Join Date: Aug 2006 Location: Oklahoma T-Town Posts: 10,337 (4.16/day) Thanks: 1,449 Thanked 1,477 Times in 1,113 Posts System Specs	Thanks for telling them Yahoo! News.... Google Toolbar FTW spell Check __________________ ocLIT The Hardware Punishers

Dec 19, 2007, 05:33 PM	#2
hacker111 Join Date: Nov 2007 Location: MA United States Posts: 332 (0.16/day) Thanks: 48 Thanked 1 Time in 1 Post	This is very surprising. Google usually has good security on there website.

System Name:	Work in progress
Processor:	AMD 955---4Ghz
Motherboard:	MSi GD70
Cooling:	OcZ Phase/water
Memory:	Crucial2GB kit (1GBx2), Ballistix 240-pin DIMM, DDR3 PC3-16000
Video Card:	CrossfireX 2 X HD 4890 1GB OCed to 1000Mhz
Hard Disk:	SSD 64GB
Optical Drive:	DVD-L 16x
CRT/LCD Model:	Envision 24'' 1920x1200
Case:	Using the desk ATM
Sound Card:	Sucky onboard for now :(
PSU:	1000W TruePower Quattro

Processor:	OCed 8350
Motherboard:	Sabertooth R2.0
Cooling:	Mugen 2 rev B push/pull
Memory:	16GB Gskill
Video Card:	1200 MHz 7950
Hard Disk:	Kingston 3K 120s raid 0, Sammy, WDs
Optical Drive:	flashed pioneer
CRT/LCD Model:	Auria 27" 2560x1440
Case:	cooler master HAF 932
Sound Card:	X-fi Titanium HD - Onkyo HT-RC360 Receiver - BIC America custom 5.1 set up (and extra Klipsch sub)
PSU:	Corsair 850W V2
Software:	I wish I could kill myself instead of using windows (OSX can suck it too).

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Is Security Software Becoming a Security Risk?	Polaris573	News	4	Nov 26, 2007 06:17 PM
Securing Windows 2000/XP/Server 2003 services HOW TO	Alec§taar	General Software	56	Oct 25, 2007 01:23 PM
Adobe Releases Fix for PDF Security Flaw	malware	News	0	Oct 23, 2007 08:18 AM
Zero-day flaw in Mac OS X discovered	zekrahminator	News	0	Nov 21, 2006 09:41 PM
Yahoo, Symantec unveil Internet security service	D_o_S	News	0	Jul 25, 2006 12:58 PM