Vulnerabilities for Desktop (...) - CXSECURITY.COM

Vulnerabilities for 'Desktop'

2007-06-11

CVE-2007-3150

Google Desktop allows user-assisted remote attackers to execute arbitrary programs via a man-in-the-middle attack that injects JavaScript, a www.google.com search IFRAME, and a META HTTP-EQUIV="refresh" that targets a www.google.com search for a local .exe file, which is displayed in the "results stored on your computer" portion of the search results, and when clicked invokes Google Desktop to execute this file.

2007-02-22

CVE-2007-1085

CWE-Other

Cross-site scripting (XSS) vulnerability in Google Desktop allows remote attackers to bypass protection schemes and inject arbitrary web script or HTML, and possibly gain full access to the system, by using an XSS vulnerability in google.com to extract the signature for the internal web server, then calling the "under" parameter in Advanced Search with the proper signature.

>>> Vendor: Google 95 Products

Mini search appliance

Search appliance

Custom search engine

Calendar events

Android browser

Google sketchup

App engine python sdk

Cr-48 chromebook

Android sdk tools

Google authenticator

Search appliance software

Android debug bridge

Android sdk platform tools

Play services sdk

Google i/o 2017

News and weather

Chromecast firmware

Kubernetes engine

Nexus 7 firmware

Nexus 9 firmware

Cloud messaging notification

Nest cam iq indoor firmware

Closure library

Chrome-launcher

Secret manager provider for secret store csi driver

Exposure notifications verification server

Cloud iot device sdk for embedded c

Exposure notification verification server

Google-protobuf

Protobuf-kotlin

Oauth client library for java

Copyright 2024, cxsecurity.com