Remote Code Execution Vulnerability in Google Desktop by Google

CVE-2007-3150

Summary

The vulnerability in Google Desktop allows an attacker to execute arbitrary programs on a user's system through a man-in-the-middle attack. When a user performs a search on Google, specially crafted JavaScript can be injected, leading to the display of a link to a local executable file in the search results. If clicked, this link can trigger Google Desktop to run the executable, potentially compromising the user's system security. This threat emphasizes the importance of securing web traffic and being cautious with search results.

References