Facebook users should lock down their settings for applications and third party advertisers, which are sources of spam and even malware attacks. Settings can be adjusted as noted using the second link below.
Facebook – Warning related to third party Advertisements
QUOTE: Famed author and magazine starter-upper John Battelle was surprised to find himself in an ad on Facebook recently. Facebook’s rules don’t allow for the use of your profile pictures in ads and, in any case, this wasn’t Battelle’s profile picture; it was the author picture from his most recent book. The ads were for serial identity abuser AppSumo, a site which does some sort of “web deals” thing. AppSumo turns out to have a history of “mistakenly” using the names of famous people to promote themselves.
Facebook option to set security controls for third party ads
QUOTE: Facebook does not give third party applications or ad networks the right to use your name or picture in ads. If we allow this in the future, the setting you choose will determine how your information is used. You may see social context on third party sites, including in ads, through Facebook social plugins. Although social plugins enable you to have a social experience on a third party site, Facebook does not share your information with the third party sites hosting the social plugins.