McAfee security error

McAfee are one of the best known names in Internet security, yet according to a post today on ReadWriteWeb, their website is “enabling malware distribution.”  Lidija Davis‘ post tells us:

During tests this weekend, we discovered the company who claims to “keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams,” has several cross-site scripting (XSS) vulnerabilities and provides the bad guys with a brilliant – albeit ironic – launching pad from which to unleash their attacks.

McAfee security problems

It was an XSS valnerability, which led to Twitter’s recent mickeey worm.  Although that particular worm was fairly harmless, a hacker could quite easily exploit the XSS vulnerabilities on McAfee’s sites, to (for example) redirect people to just about anywhere on the web.

At the time of writing this, I have not seen any response from McAfee. Watch this space!