FrSIRT Virus Alerts - Mal/Badsrc-A

French Security Incident Response Team

French

English

Mal/Badsrc-A Information

Alert ID : FrSIRT/ALRT-2008-02749
Aliases : HTML.XORER
Size : N/A
Rated as : Low Risk

Release Date : 2008-05-09

Description

Mal/Badsrc-A is a malicious web page that has been compromised to load a script from a malicious website.

References

http://www.sophos.com/security/analyses/viruses-and-spyware/malbadsrca.html

Credits

Reported by Sophos

ChangeLog

2008-05-09 - Initial Release

Disclaimer

The information contained herein was obtained from third party sources and is solely based upon the data available at the time of publication.

Mailinglist

	Cisco BBSM "msg" Parameter Cross Site Scripting Vulnerability
	Cisco Unified Presence Remote Denial of Service
	Cisco Unified Communications Manager Denial of Service
	Cisco Content Switching Module Remote Denial of Service Vulnerability
	Cisco Network Admission Control Shared Secret Disclosure Vulnerability
	Cisco UC Disaster Recovery Framework Command Execution Vulnerability
	Cisco IOS Denial of Service and Information Disclosure Vulnerabilities

	IBM Lotus Sametime Community Services Multiplexer Vulnerability
	IBM Lotus Quickr WYSIWYG Editors Cross Site Scripting Vulnerability
	IBM Rational Build Forge Remote Denial of Service Vulnerability
	IBM WebSphere Application Server Java Plugin Vulnerability
	IBM Lotus Expeditor "cai:" URI Handler Command Injection Vulnerability
	IBM DB2 Universal Database Local Privilege Escalation Vulnerabilities
	IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities

	Microsoft Internet Explorer Printing Cross-Zone Scripting Vulnerability
	Microsoft Malware Protection Engine Remote DoS Vulnerability (MS08-029)
	Microsoft Publisher Object Handler Validation Vulnerability (MS08-027)
	Microsoft Office Multiple Code Execution Vulnerabilities (MS08-026)
	Microsoft Windows XP I2O Filter Privilege Escalation Vulnerability
	Microsoft Internet Explorer DisableCachingOfSSLPages Weakness
	Microsoft Windows CE Image Handling Code Execution Vulnerabilities