Zero-day IE exploit...

Zero-day IE exploit...

Secure Home | Search | About
 Computer Software Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Zero-day IE exploit... Imhotep 11-22-2005
Posted by Imhotep on November 22, 2005, 7:46 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
"Microsoft has expressed concern that this new vulnerability was not
disclosed to them first, potentially putting users at risk. Although there
is currently no patch for this vulnerability, disabling Active Scripting or
switching to an alternate browser such as Mozilla Firefox would effectively
mitigate the risk."

I do not believe that there is real malicous code flouting arround for this,
this has been a known issue since May.....I believe MS has marked it as low
and as such did nothing about it....typical.

http://www.securityfocus.com/brief/58

Imhotep

Posted by Todd H. on November 22, 2005, 8:27 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> I do not believe that there is real malicous code flouting arround for this,
> this has been a known issue since May.....I believe MS has marked it as low
> and as such did nothing about it....typical.
>
> http://www.securityfocus.com/brief/58

To be fair, in May, everyone was convinced the problem was just a DOS
condition, and not exploitable for remote access. Only recently
has proof of concept code emerged to exploit it.

--
Todd H.
http://www.toddh.net/

Posted by Donnie on November 22, 2005, 8:37 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

> "Microsoft has expressed concern that this new vulnerability was not
> disclosed to them first, potentially putting users at risk. Although there
> is currently no patch for this vulnerability, disabling Active Scripting
or
> switching to an alternate browser such as Mozilla Firefox would
effectively
> mitigate the risk."
>
> I do not believe that there is real malicous code flouting arround for
this,
> this has been a known issue since May.....I believe MS has marked it as
low
> and as such did nothing about it....typical.
>
> http://www.securityfocus.com/brief/58
>
> Imhotep
###############################
I have been disabling active scripting along w/ other things in IE for
years. It has served me well.
donnie



Posted by Imhotep on November 22, 2005, 9:36 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Donnie wrote:

>
>> "Microsoft has expressed concern that this new vulnerability was not
>> disclosed to them first, potentially putting users at risk. Although
>> there is currently no patch for this vulnerability, disabling Active
>> Scripting
> or
>> switching to an alternate browser such as Mozilla Firefox would
> effectively
>> mitigate the risk."
>>
>> I do not believe that there is real malicous code flouting arround for
> this,
>> this has been a known issue since May.....I believe MS has marked it as
> low
>> and as such did nothing about it....typical.
>>
>> http://www.securityfocus.com/brief/58
>>
>> Imhotep
> ###############################
> I have been disabling active scripting along w/ other things in IE for
> years. It has served me well.
> donnie


...I bet it has!

:-)
Imhotep

Posted by Winged on November 22, 2005, 9:04 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Imhotep wrote:
> "Microsoft has expressed concern that this new vulnerability was not
> disclosed to them first, potentially putting users at risk. Although there
> is currently no patch for this vulnerability, disabling Active Scripting or
> switching to an alternate browser such as Mozilla Firefox would effectively
> mitigate the risk."
>
> I do not believe that there is real malicous code flouting arround for this,
> this has been a known issue since May.....I believe MS has marked it as low
> and as such did nothing about it....typical.
>
> http://www.securityfocus.com/brief/58
>
> Imhotep
Great Link thanks!

Winged

Similar ThreadsPosted
Where is the IE zero day exploit in the news... November 26, 2005, 11:13 pm
an interesting take on the 0-day exploit December 30, 2005, 4:56 pm
Javascript exploit November 5, 2006, 5:00 pm
Recent word exploit also causes problems in OpenOffice December 21, 2006, 3:59 pm
REAL-TIME EXPLOITS TRACKING WITH ANTI-EXPLOIT September 15, 2005, 11:08 pm

The site map in XML format XML site map

Contact Us | Privacy Policy