Once again Google Security Team Shoot itself in the foot. Ansuman Samantaray,
an Indian penetration tester discovered a small, but creative Security
flaw in Google drive that poses phishing threat to million of Google
users was ignored by Google Security team by replying that,"It is just a mare phishing attempt,not a bug in Google".
According to Ansuman, he reported a JavaScript Script Execution
vulnerability in Google Drive Files on 20th December 2012 to
Google Security Team and but Google rejected the report on 21st
December.
Ability to execute malicious script through Google drive files poses
security threats, not just phishing attack, but an attacker able to
extends the attack to malware spreading, etc.
The flaw exist in the way Google Drive preview the documents in the
browser. Online preview of the files executing code written in doc files
as HTML/JavaScript just by changing the value of a parameter called "export" in the URL.
ie. https://docs.google.com/uc?authuser=0&id=0B6mcoM7O55_jWXp2N2FvdHBVTTg&export=download .
When a Google user upload or create a file on Google Drive/Docs, then URL to that file having 'export' equals to "download" by default. So that user can download it..... more
-> source
Share
