Cenzic Reports New Gmail, IE Bugs

SANTA CLARA, Calif. -- Cenzic Inc., the leading provider of application security vulnerability assessment and risk management solutions, today published an advisory regarding vulnerabilities in Google Gmail and Microsoft Internet Explorer that could severely impact email systems and user privacy.

Researchers at Cenzic discovered that a possible cross-site request forgery, in combination with the improper use of caching directives, could lead to cross-site scripting and leakage of sensitive information. A hacker could exploit this vulnerability to access a target's confidential information. These vulnerabilities could also be exploited such that all users of a shared computer, who use Internet Explorer and share a user account - a common practice at computer kiosks in a library or Internet café - could be vulnerable.

"These vulnerabilities demonstrate the serious threats in common services that users take for granted as being safe and secure," said Mandeep Khera, VP of marketing at Cenzic. "There's an obvious need for these threats to be handled in a proactive and timely manner. While large vendors like Microsoft and Google are being more aggressive in taking measures to protect their applications, we still have a long way to go. For smaller ISVs and corporations, the situation is more bleak when it comes to application security."

Cenzic Inc.