November 30, 2004

Banners deliver Ads+trojans

by brian_turner

If you're new here, you may want to subscribe to my RSS feed. Thank you for visiting!

Earlier this week, the Register - a major hub of internet news and general interest - reported on how the a Buffer Overflow Frame (BOFRA) exploit led to its ad server serving trojans with its ads: Bofra exploit hits our ad serving supplier

Crucially, although Microsoft Windows machines are - of course - vulnerable to the attacks, especially through - surprise surprise - Internet Explorer 6 - there remains an exploit in Apache that allows such ads to run from servers.

Until the required update patches for Apache make distribution, this situation makes for an extremely serious security threat to internet users - the ability to infect a wide arc of traffic simulataneously across multiple sites.

Even still, Analyst form Gartner predicts attacks via the BOFRA exploit will become more common, and aggressively criticised Microsoft, declaring that businesses and home users cannot expect to safely rely on the corporate giant to protect them from security threats.

Discuss this in the Internet Business forums

Story link: Banners deliver Ads+trojans

Add to Bookmarks: