Gmail's Zero-Day Flaw Allows Attackers to Steal Messages

#1

Gmail can be easily hacked, allowing any past--and future e-mail messages--to be forwarded to the attacker's own in-box, a vulnerability researcher said Tuesday.

Accounts on Google Inc.'s Gmail can be easily hacked, allowing any past -- and future e-mail messages -- to be forwarded to the attacker's own in-box, a vulnerability researcher said Tuesday.

Dubbed a "cross-site request forgery" (CSRF), the Gmail bug was disclosed Tuesday by Petko Petkov, a U.K.-based Web vulnerability penetration tester who has made a name for himself of late. In the past two weeks, Petkov has publicly posted information about critical, zero-day bugs in Apple Inc.'s QuickTime, Microsoft Corp.'s Windows Media Player and Adobe Systems Inc.'s Portable Document Format (PDF).

more.. link to news article