Zero-day exploit hits Internet Explorer

unluckyluciano · Dec 15, 2008

link

One flaw not addressed in yesterday's Patch Tuesday is a heap overflow within the XML parser reported on Wednesday by Bojan Zdrnja of the SANS Internet Storm Center.

The exploit in the wild on Wednesday creates an XML tag, then waits 6 seconds in an attempt to thwart antivirus engines. The exploit could then crash the browser and run malicious code when the browser is restarted. The user must be running Windows XP or Windows Server 2003, and using Internet Explorer 7.
Click to expand...

I never though I would see the day when something microsoft would be hacked.

unluckyluciano · Dec 16, 2008

bump, as I think this is pretty important.

inFINSible · Dec 21, 2008

I had a friend actually call me on the phone the other day because he was calling ALL his friends to warn them about IE's recent attacks.

He seemed to think it was extremely important.

Muck · Dec 21, 2008

They patched it on Wednesday.

http://www.microsoft.com/technet/security/bulletin/ms08-078.mspx

Log in / Register

Forums

Zero-day exploit hits Internet Explorer

unluckyluciano For My Hero JetsSuck

unluckyluciano For My Hero JetsSuck

inFINSible Bad ministrator

Muck Throwback Uniform Crusader Retired Administrator

Share This Page

Log in / Register

Useful Searches

Zero-day exploit hits Internet Explorer

unluckyluciano For My Hero JetsSuck

unluckyluciano For My Hero JetsSuck

inFINSible Bad ministrator

Muck Throwback Uniform Crusader Retired Administrator

Share This Page