Once Popular Online Ad Format Opens Top Tier Sites to XSS Attacks

guest · Sep 26, 2018

Once Popular Online Ad Format Opens Top Tier Sites to XSS Attacks
Online ad industry moves away from once prolific ads that are now deemed insecure because of DOM-based XSS vulnerabilities
September 25, 2018
https://threatpost.com/once-popular-online-ad-format-opens-top-tier-sites-to-xss-attacks/137681/

The ads in question are called iFrame Busters and they are designed to break the limits of a browser’s sandbox and offer advertisers in-your-face and highly effective ads.

But, researcher Randy Westergren found that many implementations of iFrame Busters are dangerous and the technical framework behind the ads could be exploited by an attacker in a DOM-based cross-site scripting (XSS) attack. Adversaries could use the vulnerability as an entry point and take control of a website and steal user data.

“This isn’t a browser issue. It is an issue with ad agencies developing their own specific busters that have XSS weaknesses,” Westergren said. “Site owners are ultimately responsible for removing the affected/vulnerable iFrame Busters since they are hosted directly on their servers.”
Click to expand...

Log in or Sign up

Once Popular Online Ad Format Opens Top Tier Sites to XSS Attacks

guest Guest

Log in or Sign up

Once Popular Online Ad Format Opens Top Tier Sites to XSS Attacks

guest Guest

Useful Searches