Interesting vector for browser vulnerability exploit…ebay



incidents.org has received a tip on an ebay item that contained some malicious script…

ISC reader Gareth Attrill pointed us to an eBay auction that has some escaped HTML code that sneaks in a link that tries to get a trojanized .jar (usage.jar) file loaded on anyone who loads the listing. The latest .dat for McAfee immediately detected (and deleted) the code as Exploit-ByteVerify. The lister most likely managed to bypass other protections that otherwise prevents this kind of code from being inserted into item listings. Both eBay and the ISP that is hosting the malware have been notified.


This is an interesting way to use a legit site to sneak something past the casual users. Their warning is to verify any html input that you allow from visitors to your site.

Related Posts

Blog Traffic Exchange Related Posts
  • A Deeper look at Nyxem First I should raise an alarm of warning on this one, this virus is supposed to overwrite all accessible document files (network shares too) on the 3rd of the month, so February 3rd we may be seeing some problems. Don't wait until then to make sure you have current antivirus......
  • Multi-OS virus? The multi-OS virus may be a proof of concept, but it could be a sign of bad things to come. Let's face it, there have been viruses that have taken advantage of multiple ways of spreading (email/open network shares/instant messengers...) It would almost make sense that even though it's POC..........
  • Another set of interesting tools for investigating how google sees your sites. There is a nice collection of tools at www.iwebtool.com, specifically at http://www.iwebtool.com/tools/. It's more than just how google sees your site, there are tools that show how your page ranks at alexa, etc. http://www.iwebtool.com/visual_pagerank for instance is the Visual Pagerank tool and http://www.iwebtool.com/pagerank_prediction is the google pagerank prediction tool. If......
Blog Traffic Exchange Related Websites
  • Buying and Selling Collectible Antiques If you have ever watched a television show like Antiques Road show, where people find out that their family heirlooms or garage sale finds are really worth a fortune, then you probably have a secret hope that you may have some valuable collectible antiques in your possession as well. It......
  • Make Money On EBay - Easily I am a seller on eBay, and here are my top tips for making money on eBay easily. This is aimed at helping newcomers to make money on eBay, starting with some important basics. Firstly, when you register on eBay you need to choose a name (eBay ID). Give this......
  • Guide To EBay Local Pick Up Items Purchase And Delivery eBay is without doubt the most widely known website to look for second hand items However, while many items such as mobile phones, cameras, clothes can be shipped easily through courier companies or postal services,relatively heavy items such as furniture and cars cannot. Therefore, many eBay sellers select the......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site