Google takes care of minor Gmail vulnerability

By

Google has patched a minor flaw that allowed JavaScript code to run when viewing a Gmail message, the search engine giant said today.

Attackers could have applied malicious code to gather email addresses or even compromise the account, according to "Anthony," a 14-year-old blogger who discovered the vulnerability.


He said he found the flaw while trying to email JavaScript code from his Yahoo account to his Gmail account.

Google patched the problem shortly after learning about it.

"We learned of a minor security flaw in Gmail a little while ago and worked quickly to fix the problem, which has now been resolved," a Google spokeswoman said. "We encourage all vulnerability reporters to follow responsible disclosure practices and notify vendors first before making the vulnerability public."

This is not the first Gmail vulnerability discovered since the webmail service, popular for its large storage space and organization and search features, was launched.

In January 2005, Google was made aware of a bug that allowed hackers to reveal details of other users' personal emails, and even their account passwords.

Later in the year, Google patched two holes that would have allowed attackers to gain control of Gmail accounts and potentially carry out scams. 

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

Qantas facing 'significant' data theft after cyber attack

Qantas facing 'significant' data theft after cyber attack

Home Affairs officer accessed data on "friends and associates"

Home Affairs officer accessed data on "friends and associates"

International Criminal Court hit by cyber attack

International Criminal Court hit by cyber attack

SA Power Networks tackles IAM, cloud security under five-year strategy

SA Power Networks tackles IAM, cloud security under five-year strategy

Log In

  |  Forgot your password?