Domain Spoofing Vulnerability in Google Toolbar by Google

CVE-2007-6536

Summary

The Custom Button Installer dialog in Google Toolbar versions 4 and 5 beta is susceptible to a domain spoofing vulnerability. It fails to accurately verify domain names before displaying them in the 'Downloaded from' and 'Privacy considerations' sections. This oversight allows remote attackers to present deceptive domain names, tricking users into downloading malicious button XML files. For instance, an attacker could exploit an open redirector, causing the dialog to show a trusted domain like www.google.com even when the content originates from a malicious site, thus increasing the risk of unintended software installations.

References