CVE-2002-1444

Description

The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of service (crash with an exception in oleaut32.dll) via malicious HTML, possibly related to small width and height parameters or an incorrect call to the Google.Search() function.

Affected products

• Google / toolbar1.1.60 – 1.1.60
• microsoft / internet_explorer5.5 – 5.5
• microsoft / internet_explorer6.0 – 6.0

Exploits & proofs of concept

• exploit-dbGoogle Toolbar 1.1.60 - Search Function Denial of Serviceby onet

References

• MISChttp://www.iss.net/security_center/static/9883.php
• MISChttp://www.securityfocus.com/bid/5477
• MISChttp://www.sztolnia.pl/hack/googIE/googIE.html
• MISChttp://online.securityfocus.com/archive/1/287498