Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Adobe warns of ?clickjacking? attacks

Oct 8, 2008 11:19AM PDT

Fools browsers into redirection

Written by Iain Thomson in San Francisco

vnunet.com, 09 Oct 2008


Adobe has issued a security alert about its Flash software that makes it vulnerable to being abused by hackers in a practice known as clickjacking.

Clickjacking involves subverting a web page so that when a visitor clicks on a link they are redirected to a site the hackers wants them to see. It is a variant of cross-site scripting attacks but appears to be more serious.

The details of the attack were due to be published at the OWASP NYC AppSec 2008 Conference but the talk was withheld at Adobe?s request until a workaround could be developed.

More: http://www.vnunet.com/vnunet/news/2227827/adobe-warns-clickjacking

Discussion is locked