Description
Cross-site scripting (XSS) vulnerability in Macromedia Flash ad user tracking capability allows remote attackers to insert arbitrary Javascript via the clickTAG field.
References
- http://www.macromedia.com/support/flash/ts/documents/clicktag_security.htm
- 20030413 Misuse of Macromedia Flash Ads clickTAG Option May Lead to Privacy Breach mailing-list
- http://www.securiteam.com/securitynews/5XP0B0U9PE.html
- 20030413 Misuse of Macromedia Flash Ads clickTAG Option May Lead to Privacy Breach mailing-list