EIP-2026-118617

This is a technical analysis of a vulnerability in Google Talk's deprecated URI handler, where the /gaiaserver parameter can be injected to redirect authentication credentials to an attacker-controlled server. The writeup includes registry details, proof-of-concept HTML, and network traffic analysis.