The Google Mac blog has a small post about the re-release of Gmail, Blogger and Search History widgets for Mac OS X. The original widgets were identified as having a security vulnerability.
The scary thing was the example article about how all you needed to do was send a specially crafted email and mouseover the email message in the Gmail widget to compromise the user's computer.
Google Mac Blog post: http://googlemac.blogspot.com/2007/12/mac-os-x-dashboard-widget-security.html
Gmail Widget article: http://log.does-not-exist.org/archives/2007/12/19/2159_more_on_widgets_when_one_email_is_enough_to_break_a_system.html
|