clipped from www.pcworld.com Firefox Exploit can Hack Gmail Vulnerability allows malicious code into browsers, revealing users' Google accounts. Darren Pauli, Computerworld Australia Saturday, November 17, 2007 10:00 AM PST Mozilla has taken another security blow with the discovery that Google user accounts can be accessed through a dangerous Firefox exploit. The vulnerability, which is still in the wild some 10 days after its discovery on gnucitizen.org, allows hackers to access Google accounts, including Gmail, with cross-site scripting attacks. A client or server-side exploit can be inserted into .zip files via open document formats from Microsoft Office 2007 and OpenOffice, and uploaded to a server where the Firefox JAR protocol extracts the compressed data. According to the Web site, affected platforms range from Web mail clients, collaboration and document sharing systems and other Web 2.0 applications from large software vendors including Google and Microsoft.