Reply to thread

Message: <blockquote data-quote="olympic" data-source="post: 3597402" data-attributes="member: 116794">Big Security Hole in All IE VersionsOn Wednesday, Security Fix <a href="http://voices.washingtonpost.com/securityfix/2008/12/exploit_for_unpatched_internet.html" target="_blank">warned readers</a> about a newly-discovered security hole in Internet Explorer 7. I'm posting this again because Microsoft now says the flaw affects all supported versions of IE, and because security experts are warning that a large number of sites are being compromised in an effort to exploit this vulnerability and install malware on vulnerable systems.  The SANS Internet Storm Center <a href="http://isc.sans.org/diary.html?storyid=5464" target="_blank">reports</a> that hackers are breaking into legitimate Web sites and uploading code that could install data-stealing software on the machine of a user who visits the site using Internet Explorer. SANS's chief technology officer Johannes Ullrich estimates that thousands of sites have been seeded with this exploit to date.   For example, Web security firm Websense <a href="http://securitylabs.websense.com/content/Alerts/3261.aspx" target="_blank">reports</a> that hackers have compromised the Chinese Web site for ABIT, the maker of motherboards that power many home computers. So far, the exploits appear to be only stealing online gaming credentials, but SANS and <a href="http://blog.trendmicro.com/zero-day-ie-flaw-being-actively-exploited/" target="_blank">others</a> warn that attackers will likely use this exploit more deftly in the coming days and weeks.   According to Microsoft's <a href="http://www.microsoft.com/technet/security/advisory/961051.mspx" target="_blank">revised security advisory</a>, this flaw is present in every version of IE in use today, from IE5 all the way through to IE8 Beta 2. more.....<a href="http://voices.washingtonpost.com/securityfix/2008/12/microsoft_big_security_hole_in.html" target="_blank">http://voices.washingtonpost.com/securityfix/2008/12/microsoft_big_security_hole_in.html</a></blockquote>

Verification: Asuwa dahayen wadi kalama keeyada?

Top Bottom