Free tool blocks Facebook, MySpace, and Yahoo ActiveX vulnerabilities
February 8th, 2008 by Shanmuga
"A researcher over at the Internet Storm Center has created a powerful GUI that will set the kill-bits on vulnerable ActiveX controls used in Facebook, Myspace, and Yahoo apps. These popular apps came under attack on Monday after researchers Elazar Broad and Krystian Kloskowski disclosed their findings to a online security newsgroup.
Read the rest of this entry »
If you enjoyed this post, make sure you subscribe to my RSS feed!
Category: Software, Vulnerabilities | No Comments »
"Bugs in the ActiveX controls on popular social networking sites Facebook and MySpace can be used by hackers to snatch control of Windows PCs, security experts said today. Initially made public by researcher Elazar Broad on the Full Disclosure security mailing list, the vulnerabilities are in a pair of ActiveX controls that Facebook and MySpace provide to users for uploading images to their pages via Microsoft’s Internet Explorer (IE) browser.
"Facebook is to be quizzed about its data protection policies by the Information Commissioner’s Office. The investigation follows a complaint by a user of the social network who was unable to fully delete their profile even after terminating their account. Currently, personal information remains on Facebook’s servers even after a user deactivates an account.
