Google Desktop Hole Exposed, Fixed

By Barry Schwartz

Published: February 21, 2007 at 9:21 am

BusinessWeek reports that Google Desktop had a major defect that could have potentially enabled hackers to view personal files on a computer with Google Desktop installed. The hole was plugged February 1st, a few weeks after it was discovered by Watchfire Corp. Google says it has no evidence the vulnerability was exploited.

Google Desktop was vulnerable to what security experts call a “cross-site scripting attack.” This vulnerability would potentially enable hackers to place malicious code on your personal computer. The hacker could then search all the files on the personal computer and possibly even take over the machine.

Explore more on

Bloomberg Businessweek Computer security Cross-site scripting Google Google Desktop

Add Search Engine Land as a preferred source on Google

Editorial disclosure

Search Engine Land is owned by Semrush. We remain committed to providing high-quality coverage of marketing topics. Unless otherwise noted, this page’s content was written by either an employee or a paid contractor of Semrush Inc.

About the author

Barry Schwartz

Barry Schwartz is a technologist and a Contributing Editor to Search Engine Land and a member of the programming team for SMX events. He owns RustyBrick, a NY based web consulting firm. He also runs Search Engine Roundtable, a popular search blog on very advanced SEM topics.

In 2019, Barry was awarded the Outstanding Community Services Award from Search Engine Land, in 2018 he was awarded the US Search Awards the "US Search Personality Of The Year," you can learn more over here and in 2023 he was listed as a top 50 most influential PPCer by Marketing O'Clock.

Barry can be followed on X here and you can learn more about Barry Schwartz over here or on his personal site.