14 year old discovers Gmail vulnerability

[shwetanshu]

In a blog posting on blogspot (http://ph3rny.blogspot.com/2006/03/vulnerability-in-gmail.html) a 14 year old kid named Anthony has discovered a Javascript Gmail vulnerability.

Anthony wrote "Apparently javascript will run if it is withing the preview of the message" meaning that hackers could grab email addresses or possibly steal cookies and compromise Google accounts. It's surprising that this vulnerability existed and who knows how long this has been a hole.

According to Anthony the Javascript he sent to himself was from a Yahoo account, emailing from Gmail to Gmail accounts filters the code out.

24 hours after Anthony discovered the issue Google have now fixed the problem but have not issued a statement regarding this latest privacy slip up.

http://www.neowin.net/index.php?act=view&id=32435

[satbir]

i must say ........... anthony is a geek.......... found a hole in gmail at the age of 14......... when i was 14..... i didn't even know how to surf the net..............

[rajkumar_personal]

AMAZING find.....
But sadly this threat has been rectified by the GMail ppl as far as I know !

[Rohan Rastogi]

Yeah, it's all worked up now. Thanks to Anthony, my PC's safe

[AcceleratorX]

i must say ........... anthony is a geek.......... found a hole in gmail at the age of 14......... when i was 14..... i didn't even know how to surf the net..............

Times have changed now. I will be 14 soon.....:P :D

[iinfi]

@AcceleratorX:
gud luck