An exploit which allowed mischievous people to steal contact lists from GMail
users has been patched
The flaw, similar to previous problems with GMail, was first reported by Googlified. The security bug was introduced through an unannounced feature on Google Video that was designed to allow users' to email clips to their contacts more easily.
Many of the issues are worked around by using a POP email client rather than the web client. Exploitation of this particular flaw would require someone visiting a malicious site, though not much else is required.