Finnish Researcher Stomps Yahoo Mail Security Bug

A Finnish researcher has stomped a Yahoo Mail security vulnerability. “What’s supposed to happen is that Yahoo! Mail should filter malicious HTML code, and this mostly works. However, [Jouko] Pynnönen found, ‘certain malformed HTML code could pass the filter’. An attacker could embed malicious JavaScript in a correctly-formatted message, and get past the filters.”

%d bloggers like this: