Google Search API Worms

To: full-disclosure@xxxxxxxxxxxxxxxxx, bugtraq@xxxxxxxxxxxxxxxxx, pen-test@xxxxxxxxxxxxxxxxx, webappsec@xxxxxxxxxxxxxxxxx
Subject: Google Search API Worms
From: "pdp (architect)" <pdp.gnucitizen@xxxxxxxxxxxxxx>
Date: Thu, 14 Sep 2006 11:27:20 +0100
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=googlemail.com; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=JAyy2hDXzBe3B4V0uyfJwBiFlaIbPGM9oT/ZTb0tT9U2fKPv16d1fFwomMl1QlDmI3iuShY+nQcSMe60q93XFcW6h49Gnu2Pg2koP2hksBSi6e/BVZCyLrSQwR9HcN0xKXPbdhIByv22ZCkO23aU4Ir3nlxFvN86YN+HWszjJvM=
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

http://www.gnucitizen.org/blog/google-search-api-worms

The service that concerns me the most is Google AJAX Search API, the
new JavaScript powered search widget. In this article I cover the
potential problems with Google AJAX Search API and how it can be used
by web worms to propagate.

--
pdp (architect)
http://www.gnucitizen.org

Prev by Date: @System Security Meeting in Pisa
Next by Date: Symantec Norton Insufficient validation of 'SymEvent' driver input buffer
Previous by thread: @System Security Meeting in Pisa
Next by thread: Symantec Norton Insufficient validation of 'SymEvent' driver input buffer
Index(es):
- Date
- Thread