CVE-2007-3150

CVE-2007-3150 describes a critical vulnerability in Google Desktop that allows user-assisted remote attackers to execute arbitrary programs. This is achieved through a man-in-the-middle attack that injects malicious JavaScript and a specially crafted Google search IFRAME, ultimately leading to the execution of local .exe files when clicked within the search results. The vulnerability carries a CVSS score of 9.3 (Critical) due to its network-based attack vector, medium complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.