TTCSIRT-076.122717: TT-CSIRT Advisory – Google Security Updates

Google has released a security update warning customers that some of the files provided by third-party vendors through its advertising platform can introduce cross-site scripting (XSS) vulnerabilities.

Some of these vendors include:

a) adform/IFrameManager.html
b) admotion/afa-iframe.htm
c) bonzai/bonzaiBuster.html
d) exponential/buster.html
e) eyeblaster/addineyeV2.html
f) eyewonder/interim.html
g) flashtalking/ftlocal.html
h) ipinyou/py_buster.html
i) jivox/jivoxibuster.html
j) mediaplex/mojofb_v9.html
k) mixpo/framebust.html
l) predicta/predicta_bf.html
m) rockabox/rockabox_buster.html
n) liquidus/iframeX.htm
o) controbox/iframebuster.html
p) spongecell/spongecell-spongecellbuster.html
q) unicast/unicastIFD.html
r) adrime/adrime_burst.2.0.0.htm
s) revjet/revjet_buster.html
t) kpsule/iframebuster.html