Interesting vector for browser vulnerability exploit…ebay



incidents.org has received a tip on an ebay item that contained some malicious script…

ISC reader Gareth Attrill pointed us to an eBay auction that has some escaped HTML code that sneaks in a link that tries to get a trojanized .jar (usage.jar) file loaded on anyone who loads the listing. The latest .dat for McAfee immediately detected (and deleted) the code as Exploit-ByteVerify. The lister most likely managed to bypass other protections that otherwise prevents this kind of code from being inserted into item listings. Both eBay and the ISP that is hosting the malware have been notified.


This is an interesting way to use a legit site to sneak something past the casual users. Their warning is to verify any html input that you allow from visitors to your site.

Related Posts

Blog Traffic Exchange Related Posts
  • A Deeper look at Nyxem First I should raise an alarm of warning on this one, this virus is supposed to overwrite all accessible document files (network shares too) on the 3rd of the month, so February 3rd we may be seeing some problems. Don't wait until then to make sure you have current antivirus......
  • AT&T rbl block inquiry site First, I guess I should give a primer, what's an RBL? RBL stands for Realtime Black List (or Realtime Block List depending on who you talk to.) The idea is there are machines that either 1) have no business DIRECTLY trying to deliver a mail message to a legitimate mail......
  • Facebook Fan Check Application Virus Just as last week, the facebook fan check application virus rumor is making the rounds again. And also just as last week people searching for information on the facebook fan check virus are running into some of the top search results hosting malware. There were several attack sites up last......
Blog Traffic Exchange Related Websites
  • Guide To EBay Local Pick Up Items Purchase And Delivery eBay is without doubt the most widely known website to look for second hand items However, while many items such as mobile phones, cameras, clothes can be shipped easily through courier companies or postal services,relatively heavy items such as furniture and cars cannot. Therefore, many eBay sellers select the......
  • Seven Reasons To Avoid Penny Auction Sites This post was written by Marie. Would you like to buy a $200 Target gift card for $2.03? What about a Toshiba Mini 10.1” Netbook PC for only $13.70? Who wouldn't, right? But where do you find such deals? As I write this article, these items are being auctioned......
  • Finding Other Stamp Collectors [/caption]Finding other stamp collectors is essential when you want to trade amongst other collectors. Thanks to the Internet, it is now possible to connect with other collectors very easily without problems. It is also easier to find rare and quality stamps that you wouldn't be able to find with any......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site