CVE-2007-1085
Last modified
CVE-2007-1085 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in Google Desktop allows remote attackers to bypass protection schemes and inject arbitrary web script or HTML, and possibly gain full access to the system, by using an XSS vulnerability in google.com to extract the signature for the internal web server, then calling the "under" parameter in Advanced Search with the proper signature.. EPSS estimates a 10.76% chance of exploitation in the next 30 days.
Description
Cross-site scripting (XSS) vulnerability in Google Desktop allows remote attackers to bypass protection schemes and inject arbitrary web script or HTML, and possibly gain full access to the system, by using an XSS vulnerability in google.com to extract the signature for the internal web server, then calling the "under" parameter in Advanced Search with the proper signature.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Desktop | All versions |
References
- http://www.kb.cert.org/vuls/id/615857US Government Resource
- http://www.kb.cert.org/vuls/id/615857US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-1085?
How severe is CVE-2007-1085?
How do I fix CVE-2007-1085?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-1079Stack-based buffer overflow in Rhino Software, Inc. FTP Voya…
- CVE-2007-1080Multiple heap-based buffer overflows in TurboFTP 5.30 Build …
- CVE-2007-1081The start function in class.t3lib_formmail.php in TYPO3 befo…
- CVE-2007-1082FTP Explorer 1.0.1 Build 047, and other versions before 1.0.…
- CVE-2007-1083Buffer overflow in the Configuration Checker (ConfigChk) Act…
- CVE-2007-1084Mozilla Firefox 2.0.0.1 and earlier does not prompt users be…
- CVE-2007-1086Unspecified binaries in IBM DB2 8.x before 8.1 FixPak 15 and…
- CVE-2007-1087IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 d…
- CVE-2007-1088Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak…
- CVE-2007-1089IBM DB2 Universal Database (UDB) 9.1 GA through 9.1 FP1 allo…
- CVE-2007-1090Microsoft Windows Explorer on Windows XP and 2003 allows rem…
- CVE-2007-1091Microsoft Internet Explorer 7 allows remote attackers to pre…
Are you affected by CVE-2007-1085?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST