The Active Network
ActiveWin Anonymous | Create a User | Reviews | News | Forums | Advertise | VBA in Excel | Users Online: 0  
 

neowin.net

Amazon.com

  *  

  0day Treasure Hunt: Researcher Hides IE Attack on Web
Time: 15:27 EST/20:27 GMT | News Source: PC World | Posted By: Kenneth van Surksum

Security researcher Aviv Raff has published code that would allow someone to take control of a computer running Internet Explorer, but there's a catch. He's not saying exactly where he's hidden the attack.

"Somewhere in my blog, I embedded a proof-of-concept code which exploits this 0day vulnerability," Raff wrote in a Wednesday blog posting. A 0day attack is a previously undisclosed software flaw that has not been fixed by the software maker.

The bug, which affects Internet Explorer 7 and IE 8, could allow an attacker to run unauthorized software on a victim's computer. Raff informed Microsoft of the flaw on Tuesday and the software vendor has not yet patched it, Raff said.

Read Only Comments
Return to News
  Displaying 0 comments
  This is an archived static copy of ActiveWin.com.

Be the first to write a comment on this story!




 

  *  
  *   *
 
replica watches