Unscored severity · published Aug 15, 2002
CVE-2002-1444
The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of service (crash with an exception in oleaut32.dll) via…
–
CVSS
13.5%
EPSS
No
On KEV
Description
The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of service (crash with an exception in oleaut32.dll) via malicious HTML, possibly related to small width and height parameters or an incorrect call to the Google.Search() function.
Exploitation
Is it being used?
Exploit prediction (EPSS)13.5% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IE
Internet Explorer · Microsoft
5.5; 6.0 · source: NVD
TO
Toolbar · Google
1.1.60 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1444
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1444
Exploit
http://online.securityfocus.com/archive/1/287498
www.iss.net
http://www.iss.net/security_center/static/9883.php
Exploit
http://www.securityfocus.com/bid/5477
Exploit
http://www.sztolnia.pl/hack/googIE/googIE.html
More from Toolbar
–
CVE-2007-6536
The Custom Button Installer dialog in Google Toolbar 4 and 5 beta presents certain domain names in the (1) "Downloaded from" and (2) "Privacy considerations" sections without…
–
CVE-2004-2475
Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web script via about.html in the About section
–
CVE-2002-1442
The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as "My…
–
CVE-2002-1443
The Google toolbar 1.1.58 and earlier allows remote web sites to monitor a user's input into the toolbar via an "onkeydown" event handler