WARNING! Forum does strange things (exploit?)!

[thop]

I noticed that the forum hangs for about 1-2 seconds on every new site, because the browser loads the following URL: http://199.107.184.146/u/c.html and suddenly i noticed some harddrive activity, now that made me suspicious. So i checked that URL, and it looks like some sort of exploit or sth. like that.

 

[bloodbob]

yeah it is the iframe buffer overflow xploit umm install sp2 and then nuke whatever its installed.

 

[carpediem]

or use Maxthon (IE Shell), which has fixed the IFRAME exploit themselves

 

[thop]

I got SP2 installed. So nothing happened and i shouldn't worry? What is the exploit supposed to do on your computer? And where did that thing come from anyway? It seems to be gone now.

 

[thop]

We have confirmation: http://isc.sans.org//diary.php?date=2004-11-20

If you operate a web site that serves banner advertisements, you are highly recommended to verify that the banners do not contain the IFRAME exploit code. Or you might want to consider disabling banner ads for a little while to minimize the risk of accidentally infecting your users and propogating.

 

[silence]

or you could just use Firefox and "Adblock" extension that allows to block any banner add u see on internet, while giving pop up protection out of the box....

i blocked every add beyond3d offers long time ago....
and if i see something new...."Adblock" console pop up and takes care of the bugger.

 

[thegrommit]

i blocked every add beyond3d offers long time ago....
and if i see something new...."Adblock" console pop up and takes care of the bugger.

Hmm. So you're taking away B3D's only source of revenue. :?

Firefox isn't vulnerable to this exploit BTW - even without using Adblock.

 

[silence]

Hmm. So you're taking away B3D's only source of revenue. :?

Firefox isn't vulnerable to this exploit BTW - even without using Adblock.

i think that Adblock just doesnt show them, they are prolly counted as shown, but not loaded in browser.....
at least thats how i would make my banner rotation software....you click on page and it sends banner to you ( +1 ), what you do with it, i wouldnt care less in the world.....cause all visitors show in sites stats.....so everytime i click or post on b3d i add that +1 to visitor count.....

it all depends on how banner rotation is made.....if it counts visitors on pages then its OK, but if there is something to check if banners are loaded, then well....tough luck...i use that extension everywhere....