Denial of Service Vulnerability in Google Toolbar for Internet Explorer

CVE-2002-1444

Summary

The Google Toolbar version 1.1.60, when used with Internet Explorer versions 5.5 and 6.0, is prone to a denial of service vulnerability. This flaw allows remote attackers to crash the browser by delivering specially crafted HTML content, which triggers an exception in the oleaut32.dll component. The vulnerability may be exploited by manipulating specific parameters such as width and height or through an erroneous invocation of the Google.Search() function, leading to a degraded user experience and significant disruption.

References