Cross-Site Scripting Vulnerability in Google Toolbar 2.0.114.1

CVE-2004-2475

Summary

A cross-site scripting (XSS) vulnerability exists in Google Toolbar 2.0.114.1, which enables attackers to inject arbitrary scripts through the 'about.html' page in the About section. Though there have been discussions on whether the payload of the attack does cross privilege boundaries due to the restrictions associated with the 'res://' protocol, the potential for script injection represents a significant concern for user security. This vulnerability highlights the importance of rigorous security measures in web applications to prevent script-based attacks.

References