Compromised CNET Website Spreading Malware

Websense Labs issued a warning on August 6, 2008 saying that CNET Website had been compromised whereby a harmful JavaScript code was embedded in it to try and exploit visitors through a familiar vulnerability in Adobe Flash's player.

The home page of the CNET Clientside Developer Blog was found with a harmful JavaScript code, which de-obfuscate into a malicious iFrame that installs its payload from another host. The code exploits the familiar 'integer overflow' flaw in Adobe Flash.

Security Researchers at Websense indicated that the Website is still hosting the harmful code and visitors without appropriate patches against the security flaw are likely to be infected without interaction. Meanwhile, the flawed software includes Adobe FlashPlayer 9.0.115.0 and older, Adobe AIR ...

» SPAMfighter News - 21-08-2008