Feeds

Why Hotmail could spread viruses even faster than Outlook

Javascript exploit looks really nasty

  • alert
  • submit to reddit

Protecting users from Firesheep and other Sidejacking attacks with SSL

A flaw in the web-based email services run by the likes of Yahoo! and Hotmail makes them conduits through which mass mailing email viruses can rapidly spread over the Internet.

That's the serious warning contained in a posting to the BugTraq security mailing list by a security researcher who said that cross-site scripting vulnerabilities make it possible to replicate Melissa-type worms through Web mail services.

To exploit the vulnerability an attacker would send an email to a victim, within which is a link to a service provider's own server. This link would contain Javascript that executes when the page is loaded and opens a window that could navigate through the victim's inbox, sending messages with the malicious link to every email address it finds in the inbox.

The trick of this exploit is that since the malicious Javascript executes inside a page from the mail service's own server, no domain-bounding error is triggered when the Javascript is controlling the window with the victim's inbox.

Although the exploit requires a user to click on a link, the fact that a malicious email comes from a trusted source and contains a link to a familiar, trusted server works in favour of any worm created which makes use of the security loophole.

The vulnerability was discovered by a white-hat hacker called Matt Parcens who has posted an advisory on the issue and the steps that need to be taken to address the issue here.

Both Yahoo! and Hotmail were notified of the issue on May 23 but it's not known if a fix has been put in place, or which other services might be affected.

Jack Clark, European product manager at Network Associates, whose McAfee division provides the antivirus software used by Hotmail said that the threat looks "plausible" and that its researchers were investigating the issue with a view to developing a fix.

He questioned the motives of Parcens in posting details of the vulnerability so soon after notifying the firms involved which he compared to trying the locks on various door and then posting details of whose doors were left open on the Internet. ®

Related Stories

Melissa virus threatens to bring email to a halt
Reports of death of email viruses greatly exaggerated?
Rise in viruses within emails outpacing growth of email
Anna Kournikova bug drops harmlessly onto the Net
Homepage spreading faster than Kournikova worm
Users haven't learned any lessons from the Love Bug
Investors mis-interpret McAfee/MS .NET deal
Why Hotmail users get so much spam

The next step in data security

More from The Register

next story
Israeli spies rebel over mass-snooping on innocent Palestinians
'Disciplinary treatment will be sharp and clear' vow spy-chiefs
Infosec geniuses hack a Canon PRINTER and install DOOM
Internet of Stuff securo-cockups strike yet again
'Speargun' program is fantasy, says cable operator
We just might notice if you cut our cables
Apple Pay is a tidy payday for Apple with 0.15% cut, sources say
Cupertino slurps 15 cents from every $100 purchase
YouTube, Amazon and Yahoo! caught in malvertising mess
Cisco says 'Kyle and Stan' attack is spreading through compromised ad networks
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
Greater dev access to iOS 8 will put us AT RISK from HACKERS
Knocking holes in Apple's walled garden could backfire, says securo-chap
Microsoft to patch ASP.NET mess even if you don't
We know what's good for you, because we made the mess says Redmond
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.