CVE-2002-1443: Medium severity Google toolbar vulnerability
Published Apr 11, 2003
·Updated
The Google toolbar 1.1.58 and earlier allows remote web sites to monitor a user's input into the toolbar via an "onkeydown" event handler.
Affected Software
14 affected components
Google toolbar=1.1.41
Google toolbar=1.1.58
Google toolbar=1.1.44
Google toolbar=1.1.42
Google toolbar=1.1.49
Google toolbar=1.1.55
Google toolbar=1.1.48
Google toolbar=1.1.57
Google toolbar=1.1.47
Google toolbar=1.1.43
Google toolbar=1.1.54
Google toolbar=1.1.53
Google toolbar=1.1.56
Google toolbar=1.1.45
Remediation
Patch Available
Patch Available
Event History
Apr 11, 2003
CVE Published
04:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1443?
CVE-2002-1443 has been classified as a medium severity vulnerability due to its potential to expose user inputs to malicious web pages.
2
How do I fix CVE-2002-1443?
To fix CVE-2002-1443, users should upgrade to a later version of the Google toolbar that addresses this vulnerability.
3
What does CVE-2002-1443 allow attackers to do?
CVE-2002-1443 allows attackers to monitor user input through the Google toolbar using an onkeydown event handler.
4
Which versions of the Google toolbar are affected by CVE-2002-1443?
Google toolbar versions 1.1.41 to 1.1.58 are affected by CVE-2002-1443.
5
Is user data at risk with CVE-2002-1443?
Yes, user data may be at risk since CVE-2002-1443 allows remote sites to capture keystrokes entered in the Google toolbar.