Zero day buffer overflow attack
Started by Humpty, Sep 20 2006 12:07 AM
11 replies to this topic
#1 OFFLINE
Posted 20 September 2006 - 12:07 AM
Quote:
The vulnerability is confirmed on a fully patched Microsoft Windows XP SP2 system. Other versions may also be affected.
Solution:
The risk of exploitation via Internet Explorer can be reduced by not visiting untrusted websites.
The currently known exploit can also be prevented from running by deactivating support for Active Scripting.
Provided and/or discovered by:
Discovered as a 0-day.
Secunia link
The vulnerability is confirmed on a fully patched Microsoft Windows XP SP2 system. Other versions may also be affected.
Solution:
The risk of exploitation via Internet Explorer can be reduced by not visiting untrusted websites.
The currently known exploit can also be prevented from running by deactivating support for Active Scripting.
Provided and/or discovered by:
Discovered as a 0-day.
Secunia link
#2 OFFLINE
Posted 20 September 2006 - 12:16 AM
Quote
Solution:
The risk of exploitation via Internet Explorer can be reduced by not visiting untrusted websites.
The currently known exploit can also be prevented from running by deactivating support for Active Scripting.
Secunia link
The risk of exploitation via Internet Explorer can be reduced by not visiting untrusted websites.
The currently known exploit can also be prevented from running by deactivating support for Active Scripting.
Secunia link
#3 OFFLINE
Posted 20 September 2006 - 12:33 AM
rridgely, on Sep 20 2006, 01:16 AM, said:
Or.... just don't use IE. 
It is never difficult to distinguish between a Scotsman with a grievance and a ray of sunshine. P. G. Wodehouse
#4 OFFLINE
#5 OFFLINE
#6 OFFLINE
Posted 20 September 2006 - 12:09 PM
Ok first off this is just my experience. So No flaming allowed, hehe. Awhile back after listening to pretty much all of You. I installed firefox. No fancy extensions or nothing. Long story Short I thought it sucked. it took Me 10 times longer for pages to load then IE, sometimes even longer. Mostly pages with pics. I belong to a custom paiting board & members post pics of theyre work for Critique. It was allmost impossible to view them with firefox. So I finnally uninstalled it. Ok Did I install it wrong? Didn,t know how to use it? Or would this be a normal problem that others have had. Cuz I,d sure give it another shot. allthough I dont have any problems with IE. Just Curious. Thanks Cowboy
#7 OFFLINE
Posted 20 September 2006 - 02:01 PM
cowboy357, on Sep 20 2006, 12:09 PM, said:
Ok first off this is just my experience. So No flaming allowed, hehe. Awhile back after listening to pretty much all of You. I installed firefox. No fancy extensions or nothing. Long story Short I thought it sucked. it took Me 10 times longer for pages to load then IE, sometimes even longer. Mostly pages with pics. I belong to a custom paiting board & members post pics of theyre work for Critique. It was allmost impossible to view them with firefox. So I finnally uninstalled it. Ok Did I install it wrong? Didn,t know how to use it? Or would this be a normal problem that others have had. Cuz I,d sure give it another shot. allthough I dont have any problems with IE. Just Curious. Thanks Cowboy
#8 OFFLINE
Posted 20 September 2006 - 02:28 PM
cowboy357, on Sep 20 2006, 07:09 AM, said:
it took Me 10 times longer for pages to load then IE, sometimes even longer.
I've personally noticed significant to pathetic slow loading if a page has tons and gobs of JavaScript on a page and no this doesn't have anything to do with being on dial-up it's because of the pages coding. Such an example is Yahoo! TV which takes forever to load in FF unless I start my proxy filtering software CookieCop to block some of Yahoo's JavaScript, yet the same site loads a bit faster in IE and Opera.
Edit: Just letting you know there's no way you could have installed it wrong!
#9 OFFLINE
Posted 20 September 2006 - 02:51 PM
Webmasters who have websites that don't valid as valid HTML/XHTML and CSS should be hanged.
Same for news sites that don't provide RSS feeds.
Have a website? Validate it!
* HTML/XHTML - http://validator.w3.org/
* CSS - http://jigsaw.w3.org/css-validator/
Same for news sites that don't provide RSS feeds.
Have a website? Validate it!
* HTML/XHTML - http://validator.w3.org/
* CSS - http://jigsaw.w3.org/css-validator/
#10 OFFLINE
Posted 20 September 2006 - 03:01 PM
Eldmannen, on Sep 20 2006, 09:51 AM, said:
Webmasters who have websites that don't valid as valid HTML/XHTML and CSS should be hanged.
And yeah you're correct about validating the code which is a must, especially for companies that have websites, and a "good" image to keep because often the website is the first contact people have with some companies or services, and it's nothing but a quick way to lose a potential customer if their Firefox, or Opera doesn't work on a site and they're forced to use Internet Explorer.
#11 OFFLINE
Posted 20 September 2006 - 06:28 PM
Andavari, on Sep 20 2006, 03:01 PM, said:
With the plethora a WYSIWYG web page authoring applications that can and do make a royal mess of the page code it's no wonder there's severe and even critical compatibility issues when a particular browser chokes on some websites.
And yeah you're correct about validating the code which is a must, especially for companies that have websites, and a "good" image to keep because often the website is the first contact people have with some companies or services, and it's nothing but a quick way to lose a potential customer if their Firefox, or Opera doesn't work on a site and they're forced to use Internet Explorer.
And yeah you're correct about validating the code which is a must, especially for companies that have websites, and a "good" image to keep because often the website is the first contact people have with some companies or services, and it's nothing but a quick way to lose a potential customer if their Firefox, or Opera doesn't work on a site and they're forced to use Internet Explorer.
#12 OFFLINE
Posted 22 September 2006 - 02:49 PM
Funny how when there is a critical zero day exploit which can do remote code execution and install malware and all kinds of crazy stuff, it takes Microsoft a month until the next "patch Tuesday" to fix it. But when there is a vulnerability in the Windows DRM that allowed people to circumvent the copy-protection there is a patch within 3 days.

















