[Owasp-delhi] NDTV.com classified by google search as a possible attack site serving malware

Tarun Dua tarundua at gmail.com
Fri Nov 21 12:02:48 EST 2008


See advisory here
http://www.google.com/safebrowsing/diagnostic?site=http://www.ndtv.com/convergence/ndtv/videos.aspx&hl=en

I couldn't see the malware sites mentioned on the advisory serving out
from ndtv.com anymore on my firebug console so I figure that these
vulnerabilities might have been gone from their site now. Does someone
has more information as to what happened here, was it their windows
servers that got compromised or XSS issues from the advertising or
user generated content served by them.

Cheers!!
-Tarun
http://tarundua.net/google/ndtv/advisory


More information about the Owasp-delhi mailing list