Microsoft released a patch for the bug on its Web site, and noted that while the attack could shut the servers down, it did not allow a hacker to gain any higher privileges or compromise any content cached on the server.
The vulnerability is not easy to exploit, said Stephen Toulouse, a security program manager at Microsoft, citing several preconditions to making an attack work. The flaw also allows the malicious programmer to place spoofed content, such as fake...
Dubbed a Reverse Cross Site Request vulnerability (RCSR) by its discoverer Robert Chapin, the flaw allows hackers to compromise users' passwords and usernames by presenting them with a fake login form.
A malicious video on MySpace.com pages changes people's profiles when played, embedding itself and adding links to fraudulent websites, experts have warned. Mikko Hypponen, chief research officer at security company F-Secure, wrote in a blog...
The extended scope of the issue was publicised by a hacker using the moniker "RSnake". For an attack to work, a malicious link has to point to an existing PDF file on the web or on the target system. Such a standard cross-site-scripting attack...
Cross-site scripting (XSS) involves injecting malicious code into pages served by other domains. For a determined and skilled attacker, there are many ways to inject malicious code into a network. You can inject JavaScript code into a web page...