25-11-05

Google Talk a vehicle for a DOS attack

Google Talk connects at random intervals (about once every day or so
in testing) to dl.google.com via HTTP and fetches a .txt file
(http://dl.google.com/googletalk/google-talk-versioncheck....) which
lists the current version of Google Talk, as well as a digital
signature of the new installer executable. If the version number is
greater than the version currently running, Google Talk will download
the .exe and, after checking its authenticity, execute it to
automatically update.

Assuming a user's DNS cache can be poisoned, a denial of service
attack is possible. Thanks to the digital signature, malware will not
execute. Yet, it is possible to force Google Talk to download a large
file which it will then analyze to determine whether the signature
matches. This will consume 100% CPU and large amounts of memory,
resulting in an unstable machine which requires a reboot in some
cases. It is also possible to plant incriminating files on a user's
machine, as the files are at first downloaded and saved to the
"Temporary Internet Files" directory before they are verified and
moved to Google Talk's data directory

comment  it is not that simple to set up a DNS spoof, but once it is said you can oblige each computer in that zone with Google talk to download a file that would be trojan or just a too big file that would hung or crash the compuers

http://seclists.org/lists/fulldisclosure/2005/Nov/0681.html   No patch

idea  too much vulnerabilities, following one after another, maybe the honeymoon is over and the real battle begins or is Google still in the honeymoon and is it still lax on the security of its products and services.  Wake up, big Google

 


00:43 Gepost door technology changes fast not a lot | Permalink | Commentaren (0) |  Facebook |

De commentaren zijn gesloten.