Hosting generously provided by
www.mv.com





Pick Your Language


09/08/2006 RSS Security Issues Discovered in ICQ
"Security problems found in the ICQ Toolbar v1.3 may allow attackers to control and change configuration settings and to inject scripting code in RSS feed contents and execute it in the contetxt of the feed interface (IE's Local Zone)"

I released a paper and gave a presentation at blackhat this year about these sorts of risk sand fully expect a flood of advisories in major products such as this.

My Blackhat Presentation Link: Zero Day Subscriptions: Using RSS and Atom Feeds As Attack Delivery Systems (Power Point)
Advisory Link: http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1510
Link to this Story: 09/08/2006 RSS Security Issues Discovered in ICQ
RSS Security Issues Repository Link: RSS Security
Link: Have a Site Suggestion, Material Request, or News? Submit it!
News RSS Feed: Web Security news RSS Feed



External Links:
Copyright 2000-2007 Cgisecurity.com.
Providing Web Security news since 2000.
Information contained on this website may not be copied without explicit permission.
Best Viewed with Netscape.
Website Security Web Application Security solid state drives ssd ebay ebay topdeals nslookup online buy macbook air not work safe software security


Popular Links By Subject

Sponsored Link (Advertise)


Subscribe to CGISecurity.com


The Web Security Mailing List
  • Re: [WEB SECURITY] Scripting Question
  • Re: [WEB SECURITY] Scripting Question
  • Re: [WEB SECURITY] Scripting Question
  • Re: [WEB SECURITY] Scripting Question
  • Re: [WEB SECURITY] Scripting Question
  • [WEB SECURITY] WASC Web Application Security Statistics Project
  • Re: [WEB SECURITY] Scripting Question
  • [WEB SECURITY] Peach 2.1 BETA2 Released
  • RE: [WEB SECURITY] Scripting Question
  • [WEB SECURITY] widespread sql injection + javascript malware

  • Contact us
    Post News, get linkage!

    Name

    Email or Homepage:

    Subject

    Finish the word below: deadb33f

    Body