IE Zero-Day - Security | DSLReports Forums (Page 3)

Author	All Replies
goalieskates Premium join:2004-09-12 land of big	reply to Dustyn Re: IE Zero-Day said by Dustyn: Who the hell cares if IE6 is vulnerable? Microsoft has to stop patching IE6 or people will continue to use it. »www.ie6countdown.com/ And the newer versions aren't? The more complex things become, the more vulnerable they are. Anyone who's actually worked in coding knows that. You may like the newer versions, you may like their new functionality, but that doesn't automatically mean they're safer. They have problems and attack vectors IE6 never even dreamed of. Let's not confuse programming reality with marketing.
	to forum · permalink · 2012-12-31 20:12:11 ·
Cartel join:2006-09-13 Chilliwack, BC kudos:2 Reviews: ·TekSavvy DSL ·Shaw ·TELUS	reply to siljaline said by siljaline: MS FixIt available at this MS KB. »support.microsoft.com/kb/2794220 I'm surprised it didn't say to disable Internet Explorer along with the Sidebar.
	to forum · permalink · 2012-12-31 20:21:37 ·
Dustyn Premium join:2003-02-26 Ontario, CAN kudos:10 1 edit	reply to goalieskates said by goalieskates: said by Dustyn: Who the hell cares if IE6 is vulnerable? Microsoft has to stop patching IE6 or people will continue to use it. »www.ie6countdown.com/ And the newer versions aren't? People using Internet Explorer 9-10 are not impacted... So in this instance, newer is better. However, I'm only referencing this particular vulnerability. For Microsoft to also patch IE6 is a step backwards from their own abandon IE6 campaign. -- Remember that cool hidden "Graffiti Wall" here on BBR? After the name change I became the "owner", so to speak as it became: Dustyn's Wall »[Serious] RIP
	to forum · permalink · 2012-12-31 20:28:14 ·
goalieskates Premium join:2004-09-12 land of big	said by Dustyn: People using Internet Explorer 9-10 are not impacted... So in this instance, newer is better. However, I'm only referencing this particular vulnerability. For Microsoft to also patch IE6 is a step backwards from their own abandon IE6 campaign. It is, but the whole campaign is silly anyway. As long as the newer versions of IE are up to snuff, it really doesn't matter what other people choose to run. More to the point, people who run IE6 haven't upgraded their Windows, either - which hurts revenue and is really what that's all about. We went to the moon without benefit of IE and Windows. If somebody doesn't want to go to a higher version browser and can live with Win98 or WinXP, more power to them.
	to forum · permalink · 2013-01-01 08:28:46 ·
StuartMW Who Is John Galt? Premium join:2000-08-06 Galt's Gulch kudos:2	Win 3.1 and IE 3.01 forever!
	to forum · permalink · 2013-01-01 08:30:16 ·
Blackbird Built for Speed Premium join:2005-01-14 Fort Wayne, IN kudos:3 Reviews: ·Frontier Communi..	reply to goalieskates said by goalieskates: ... If somebody doesn't want to go to a higher version browser and can live with Win98 or WinXP, more power to them. That is the challenge, though... living with them. In the case of Win98, not only can't one find secure browsers that will run under the OS, they can't even find current anti-malware software that will run. Nearly all of what one finds that will run (if they look really hard) is outdated ("vintage") and riddled with bugs or security holes. The only thing in one's favor is that the number of exploits targeting your OS is slowly declining - especially new zero-days. It's the main reason I finally took my Win98FE/KernelEx system off-line a couple of years ago (though I still run it at times as an isolated system for a few pieces of legacy software on it that I occasionally need). -- “The American Republic will endure until the day Congress discovers that it can bribe the public with the public's money.” A. de Tocqueville
	to forum · permalink · 2013-01-01 10:23:13 ·
StuartMW Who Is John Galt? Premium join:2000-08-06 Galt's Gulch kudos:2 Reviews: ·CenturyLink 1 edit	said by Blackbird: ...I finally took my Win98FE/KernelEx system off-line a couple of years ago (though I still run it at times as an isolated system for a few pieces of legacy software on it that I occasionally need). You can probably image it's HD(s) and run it as a Virtual Machine (VM). Then you'd have an anchor for a (small) boat I have a bunch of VM's, including some of old hardware, and use them from time to time. The good thing about VM's is that their HD(s) are just (VHD) files. Easily backed up and copied if you want to try/test something without messing up the original. I quite often test things in VM's. -- Don't feed trolls--it only makes them grow!
	to forum · permalink · 2013-01-01 11:20:24 ·
Lagz Premium join:2000-09-03 The Rock Reviews: ·AT&T DSL Service 2 edits	reply to trparky said by trparky: Oh shit, I think I know how this exploit may work. There's an attack technique which is used to overwrite the Structured Exception Handler which would, in any other case, catch the Null Reference Exception and handle it cleanly so that the program would not appear to crash. But in the case of this exploit, it would overwrite the Structured Exception Handler using either a Stack-based Buffer Overflow or Heap Spray attack. Then, something would be used to trigger (a call to a null Object, in this case) the Exception Handler and since it's been overwritten with arbitrary code, the program would then be vulnerable to attack. All of which EMET helps guard a program against. I wonder if flash or IE uses standard exception handlers or do they write their own? My instructor in C# told us to write our own exception handling when possible rather than throw standard exceptions, this might be why. When I was first introduced to exceptions I was like, HELL YEA I don't have to write as much code now. We had been writing our own exception handling up to that point. I wonder if they are just throwing standard exceptions if that's a result from laziness or management hurriedly wanting code pushed out the door? -- When somebody tells you nothing is impossible, ask him to dribble a football.
	to forum · permalink · 2013-01-01 16:19:56 ·

siljaline I'm lovin' that double wide Premium join:2002-10-12 Montreal, QC kudos:17	reply to Cartel Happy New Year Define sidebar Do you mean Gadgets
	to forum · permalink · 2013-01-01 18:51:27 ·
Lagz Premium join:2000-09-03 The Rock Reviews: ·AT&T DSL Service	said by siljaline: Happy New Year Define sidebar Do you mean Gadgets »windows.microsoft.com/en-US/wind···overview -- When somebody tells you nothing is impossible, ask him to dribble a football.
	to forum · permalink · 2013-01-01 19:17:03 ·
siljaline I'm lovin' that double wide Premium join:2002-10-12 Montreal, QC kudos:17 Reviews: ·Bell Sympatico	Thanks for the link. IIRC, gadgets and sidebar are long gone by way of extenuating issues on both for a good while. The exploit although there is a FixIt, the exploit is well explained here.
	to forum · permalink · 2013-01-02 19:54:05 ·
Oleg Bellsouth Fastaccess Premium join:2003-12-08 Birmingham, AL kudos:2	reply to redwolfe_98 Microsoft did it again
	to forum · permalink · 2013-01-02 23:53:04 ·
siljaline I'm lovin' that double wide Premium join:2002-10-12 Montreal, QC kudos:17 Reviews: ·Bell Sympatico	said by Oleg: Microsoft did it again Did what again or are you just poking fun
	to forum · permalink · 2013-01-03 19:24:33 ·
Oleg Bellsouth Fastaccess Premium join:2003-12-08 Birmingham, AL kudos:2	said by siljaline: said by Oleg: Microsoft did it again Did what again or are you just poking fun screwed up again, in security and stability field unlike other software development companies, like Mozilla,Opera in browser industry. Microsoft did not just have one or two stability or security issues.
	to forum · permalink · 2013-01-03 19:57:56 ·
therube join:2004-11-11 Randallstown, MD	reply to redwolfe_98 Symantec Finds the Hackers Behind Microsoft’s Latest Zero-Day Flaw Microsoft Won’t Patch Critical IE Flaw on Tuesday (This coming Tuesday, that is.)
	to forum · permalink · 2013-01-04 10:58:28 ·
Smokey Bear veritas odium parit Premium join:2008-03-15 Annie's Pub kudos:4	reply to chachazz said by chachazz: Microsoft Security Advisory (2794220) Vulnerability in Internet Explorer Could Allow Remote Code Execution \| Updated: Monday, December 31, 2012 Microsoft Fix it solution, "MSHTML Shim Workaround", that prevents exploitation of this issue See Microsoft Knowledge Base Article 2794220 to use the automated Microsoft Fix it solution to enable or disable this workaround. Here it is : Fix it for me - FixIt Solution Thanks for posting the fix-it solution chachazz however it seems that security firm Exodus Intelligence has managed to bypass the fix and compromise a fully-patched system... Info here: »blog.exodusintel.com/2013/01/04/···12-4792/ -- »bit.ly/gUqYaH - C. Brian Smith: Think of the exclamation point as a car horn: a little goes a long way. Lay on it too hard and everyone’s going to think you’re a moron.
	to forum · permalink · 2013-01-04 15:22:15 ·
siljaline I'm lovin' that double wide Premium join:2002-10-12 Montreal, QC kudos:17 Reviews: ·Bell Sympatico	The Krebs Article that redwolfe_98 originally posted has the FixIt
	to forum · permalink · 2013-01-04 15:49:04 ·
Smokey Bear veritas odium parit Premium join:2008-03-15 Annie's Pub kudos:4	said by siljaline : Some slight duplication of effort never hurt anybody. Better than no information • voila
	to forum · permalink · 2013-01-04 16:00:40 ·
chachazz Premium join:2003-12-14 kudos:7	reply to Smokey Bear said by Smokey Bear: Thanks for posting the fix-it solution chachazz however it seems that security firm Exodus Intelligence has managed to bypass the fix and compromise a fully-patched system... Info here: »blog.exodusintel.com/2013/01/04/···12-4792/ Absolutely essential info. Thank you very much Smokey Bear . Microsoft should be burning the midnight oil over this one. quote: After posting our analysis of the current 0day in Internet Explorer which was used in a “watering hole” style attack hosted on the Council for Foreign Relations website, we decided to take a look at the Fix It patch made available by Microsoft to address the vulnerability. After less than a day of reverse engineering, we found that we were able to bypass the fix and compromise a fully-patched system with a variation of the exploit we developed earlier this week. We have included details on the bypass to customers of our intelligence feeds and will notify Microsoft of the issue. In practice with coordinated vulnerability disclosure, we intend to update this post with details when Microsoft has addressed the problematic patch.
	to forum · permalink · 2013-01-04 16:05:20 ·
siljaline I'm lovin' that double wide Premium join:2002-10-12 Montreal, QC kudos:17	reply to Smokey Bear Researchers Bypass Microsoft Fixit for IE Zero Day
	to forum · permalink · 2013-01-04 18:55:19 ·

Broadband Tech > Security > Security > IE Zero-Day

Re: IE Zero-Day