Multiple vulnerabilities in the AtHoc Toolbar (#NISR19012005c)

NGSSoftware Insight Security Research Advisory Name: Multiple Vulnerabilities in the AtHoc Toolbar For MSIE Systems Affected: AtHoc Toolbar for MSIE Severity: High Vendor URL: http://www.athoc.com/site/products/toolbar.asp Author: Mark Litchfield [email protected] John Heasman...

Multiple AtHoc toolbar bugs

Buffer overflows, format string bugs in ActiveX components...

CVE-2004-2475

Cross-site scripting XSS vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web script via about.html in the About section. NOTE: some followup posts suggest that the demonstration code's use of the res:// protocol does not cross privilege boundaries, since it i...

Patch available for high risk flaws in the AtHoc Toolbar

Mark Litchfield and John Heasman of NGSSoftware have discovered two high risk vulnerabilities in the AtHoc Toolbar. The AtHoc toolbar is a plugin for Microsoft's Internet Explorer. The toolbar is redistributed to users of eBay Accenture ThomasRegister ThomasRegional Juniper Networks WiredNews...

CVE-2005-0188

Format string vulnerability in the SetBaseURL function in AtHoc toolbar allows remote attackers to execute arbitrary code via format string specifiers in an invalid URL that is recorded in the debug log...

Google Toolbar HTML Injection

Binary data 2306.prm...

Google Toolbar 1.1.x - About.HTML HTML Injection

Google Toolbar 1.1.x - About.HTML HTML Injection source: https://www.securityfocus.com/bid/11210/info Google Toolbar is reported prone to a HTML injection vulnerability. It is reported that the Google Toolbar 'ABOUT.HTML' page allows the injection of HTML and JavaScript code. This vulnerability m...

Google Toolbar Local zone scripting

By using resource from GoogleToolbar1.dll it's possible to execute scripting in local zone...

Google Toolbar 1.1.x - About.HTML HTML Injection

source: https://www.securityfocus.com/bid/11210/info Google Toolbar is reported prone to a HTML injection vulnerability. It is reported that the Google Toolbar 'ABOUT.HTML' page allows the injection of HTML and JavaScript code. This vulnerability may allow an attacker to inject malicious HTML and...

CVE-2002-1443

CVE-2002-1443 affects Google Toolbar 1.1.58 and earlier. The vulnerability arises from an onkeydown event handler that allows remote websites to monitor a user’s input in the toolbar. The provided documents identify the affected product and the root cause (the event handler) and state the impact ...

CVE-2002-1443

The Google toolbar 1.1.58 and earlier allows remote web sites to monitor a user's input into the toolbar via an "onkeydown" event handler...

MapQuest Toolbar Detection

The remote host is using the MapQuest Toolbar program. You should ensure that the user intended to install this software. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12016; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2002-1442

The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as "My Computer" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location...

CVE-2002-1443

The Google toolbar 1.1.58 and earlier allows remote web sites to monitor a user's input into the toolbar via an "onkeydown" event handler...

CVE-2002-1442

The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as "My Computer" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location...

CVE-2002-1442

Affected product: Google Toolbar (IE) up to version 1.1.58 and earlier. Vulnerability: remote sites could trigger unauthorized toolbar operations, including script execution and file reading in other zones (e.g., My Computer) by opening a window to tools.google.com or the res: protocol and then u...

CVE-2002-1444

The CVE-2002-1444 entry concerns Google Toolbar 1.1.60 running in Internet Explorer 5.5/6.0. Affected component: Google Toolbar HTML/ActiveX handling. Root cause: the vulnerability enables remote attackers to cause a denial of service (crash) through malicious HTML, with possible involvement of s...

CVE-2002-1444

The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of service crash with an exception in oleaut32.dll via malicious HTML, possibly related to small width and height parameters or an incorrect call to the Google.Search function...

CVE-2002-1888

CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization and possibly other web servers for name resolution, which allows those organizations to obtain internal server names...

IE [with Google Toolbar installed] crash

// trying to send it one more time Hello, I don't think it is a serious problem, however it may help creating malicious e-mails or webpages that may crash any proggie that uses IE to render html content. You may test it by visiting the following page http://www.sztolnia.pl/hack/googIE/googIE.html...