| Home : June 11 2014 Computer News : TweetDeck patches XSS vulnerability after rampant pop-up spam |
|
TweetDeck patches XSS vulnerability after rampant pop-up spam |
June 11, 2014
If you saw strange pop-up messages in TweetDeck this morning, you weren’t alone. It wasn’t the work of the Syrian Electronic Army, just some relatively
harmless XSS exploitation.
The vulnerability allowed hackers to remotely execute code, specifically in TweetDeck’s Chrome app, though the exploit was spotted in other TweetDeck
versions. (The Mac app was reportedly not affected.)
The Mac application for Tweetdeck does not appear to be vulnerable to the XSS. Confirmed in Chrome though.
alert("Yo!");♥— Frederic Jacobs (@FredericJacobs) June 11, 2014
Some 40,000 Twitter accounts also unwittingly retweeted a string of code from a My Little
Pony account, thought to be the result of the same vulnerability.To read this article in full or to leave a comment, please click here
Link: http://www.pcworld.com/article/2362129/tweetdeck-patches-xss-vulnerability-after-rampant-pop-up-spam.html#tk.rss_all
|
|
|
|
|