MySpace Attacked by Flash Worm

Myspace/News/Article/Brian Krebs
Found on: Washingtonpost.com


A number of personal pages on the social networking site MySpace.com were attacked over the weekend using a security flaw in Macromedia Flash -- a flaw that Adobe released a patch to fix just last week. The worm spreads each time a MySpace user visits an infected user-profile page.

MySpace sent out a notice to all of its users late yesterday, saying the worm only appears to have affected people with vulnerable Flash players. Last week, Security Fix urged readers to upgrade their players to v. 9.0, noting that Adobe had fixed a flaw which could let bad guys hijack your browser if you were to merely browse a Web site that exploits the vulnerability. The Adobe update fixes the vulnerability in The patch fixes the vulnerability Internet Explorer, Firefox, Netscape and Opera.