Clipboard has been hacked with http://xp-vista-update.net/?id=01502200020

Bug #269647 reported by Mellotron
14
Affects Status Importance Assigned to Milestone
flashplugin-nonfree (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

Sorry for resubmitting, I forgot to check this as a security vulnerability. Please delete the other one.

I do not know if this is a bug persay, but it is pretty important.
My clipboard has been hacked, and now permanently has this in it: "http://xp-vista-update.net/?id=01502200020"

A quick search on google has given me this result:
Twitter / davehyndman
 - 5:21pm
wow ... something's hijacked my Mac clipboard with this string "http://xp-vista-update.net/?id=01502200020" .. malicious URL about 9 hours ago from twhirl ...

Unfortunately, going to the site doesn't show anything unfortunately, I guess its cached data.
I wouldn't be surprised if I picked it up from the web, I do go on my fair share of dodgey sites. Also note that I have a tremendous amount of packages installed, but there has not been any lately that I have put in.

Do note that control+v, and shift+insert will yeild this result: http://xp-vista-update.net/?id=01502200020
middle clicking will however display what I highlighted.

I am running ubuntu 8.04 32bit, on a system76 serval performance

Revision history for this message
Andres Mujica (andres.mujica) wrote :

Ok, this seems to be a real issue in adobe's flash.

http://blogs.zdnet.com/security/?p=1733

Revision history for this message
Dan Trevino (dantrevino) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. This bug did not have a package associated with it, which is important for ensuring that it gets looked at by the proper developers. You can learn more about finding the right package at https://wiki.ubuntu.com/Bugs/FindRightPackage . I have classified this bug as a bug in flashplugin-nonfree.

Revision history for this message
Dan Trevino (dantrevino) wrote :

This is fixed with the flash 10 release from Adobe. Marking as invalid.

Changed in flashplugin-nonfree:
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.