{"id":"CVE-2002-1442","aliases":["EUVD-2002-1425","GHSA-hmfp-vr8f-x8xc"],"status":"published","title":"The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar...","description":"The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as \"My Computer\" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location to the toolbar's configuration URL, which bypasses the origin verification check.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01374,"percentile":0.7218,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2003-03-18T05:00:00Z","modified":"2026-06-16T21:59:20Z","products":[{"vendor":"google","product":"toolbar"}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0066.html","tags":["mailing-list","x_refsource_NTBUGTRAQ","x_transferred"]},{"url":"http://online.securityfocus.com/archive/1/286527","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5424","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"http://sec.greymagic.com/adv/gm001-mc/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-1442"},{"url":"http://sec.greymagic.com/adv/gm001-mc"},{"url":"https://github.com/advisories/GHSA-hmfp-vr8f-x8xc"}],"sources":{"cve":[{"id":"CVE-2002-1442","description":"The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as \"My Computer\" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location to the toolbar's configuration URL, which bypasses the origin verification check.","status":"published","published":"2003-03-18T05:00:00Z","modified":"2024-08-08T03:26:28.694Z","updated_at":"2026-11-02T14:33:54.972584Z"}],"euvd":[{"id":"EUVD-2002-1425","description":"The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as \"My Computer\" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location to the toolbar's configuration URL, which bypasses the origin verification check.","status":"published","published":"2003-03-18T05:00:00Z","modified":"2024-08-08T03:26:28Z","updated_at":"2026-11-03T01:14:56.257509Z"}],"ghsa":[{"id":"GHSA-hmfp-vr8f-x8xc","title":"The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar...","description":"The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as \"My Computer\" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location to the toolbar's configuration URL, which bypasses the origin verification check.","status":"published","published":"2022-04-30T18:21:11Z","modified":"2025-04-03T03:53:29Z","updated_at":"2026-11-02T15:00:38.47838Z"}],"nvd":[{"id":"CVE-2002-1442","description":"The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as \"My Computer\" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location to the toolbar's configuration URL, which bypasses the origin verification check.","status":"published","published":"2003-04-11T04:00:00Z","modified":"2026-06-16T21:59:20.23Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:44.251133Z"}]}}