Re: XSIO - Cross Site Image Overlaying

To: sven.vetsch@xxxxxxxxxxxxx
Subject: Re: XSIO - Cross Site Image Overlaying
From: "Tod Beardsley" <todb@xxxxxxxxxxxxxxxxxx>
Date: Mon, 10 Sep 2007 16:01:27 -0500
Cc: bugtraq@xxxxxxxxxxxxxxxxx
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; bh=EqFy8LzfWPY4XCCX9njwbycmLycS83CM8lfIecQ9cqs=; b=sVasfohZEtl8VQ6Sv4CZuoRjdP34qQH/RWMjy2Q85kEusAb0D9IoI/DtLaLMNrp9WY6SjMJW+jcqdXc+7VaIHqMfG8tH6OVqwhbHOyNKafwVmTfXA9U4PtXWECdSLBrbP7exN2q9W97PbnDPm4l1572lA6kL+Y7H2nzQTUiW26I=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; b=tJPJe8WipnHu6iMkC8X5+R5Z2Fo+Za7U0pYRl2pgoMZ2TO0GkVRSRJPjSI/SSfIK8NtQBgtBL6JtburGq1czqtS6bUMVgwZP0vdsYI4jxtFxb4bDT+JKAoDvadQc4ANLbtTjOUBR6WCxVK/RA8p+HXkqCSOKWnKzrITNalT3tC8=
In-reply-to: <46E59B3F.3020100@xxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <46E59B3F.3020100@xxxxxxxxxxxxx>
Sender: planb.security@xxxxxxxxx

On 9/10/07, Sven Vetsch / Disenchant <sven.vetsch@xxxxxxxxxxxxx> wrote:

> I wasn't able to find something written about [cross site image overlay]

FYI, this was discussed as a "Trojaned Navigation Menu" attack,
detailed on the Month of Myspace Bugs page back in April (and November
of 2006).

http://momby.livejournal.com/4250.html

Just for some historical perspective and existing research on the subject.

If the attacker has control of element positioning, he has control
over all the link targets in a document.

-- 
todb@xxxxxxxxxxxxxxxxxx | ICQ: 335082155 | Note: Due to Google's
privacy policy <http://tinyurl.com/5xbtl> and the United States'
policy on electronic surveillance <http://tinyurl.com/muuyl>,
please do not IM/e-mail me anything you wish to remain secret.

References:
- XSIO - Cross Site Image Overlaying
  - From: Sven Vetsch / Disenchant

Prev by Date: ekoparty 3rd edition CFP
Next by Date: [SECURITY] [DSA 1370-2] New phpmyadmin packages fix several vulnerabilities
Previous by thread: XSIO - Cross Site Image Overlaying
Next by thread: New Whitepaper : g00gle CrewBots
Index(es):
- Date
- Thread