http://blogs.mcafee.com/mcafee-labs/yet-another-unpatched-drive-by-exploit-found-on-the-web Tue, 29 Nov 2011 07:51:20 +0000 hourly 1 http://wordpress.org/?v=3.3.1 http://blogs.mcafee.com/mcafee-labs/yet-another-unpatched-drive-by-exploit-found-on-the-web/comment-page-1#comment-20333 Download installer Mon, 09 Feb 2009 05:03:25 +0000 http://www.labs.com/research/blog/?p=763#comment-20333 Recently i downloaded IE8 beta and my KAV says that it infected with trojan... Recently i downloaded IE8 beta and my KAV says that it infected with trojan…

]]> http://blogs.mcafee.com/mcafee-labs/yet-another-unpatched-drive-by-exploit-found-on-the-web/comment-page-1#comment-20327 Internet Explorer zero-day attack in the wild Thu, 11 Dec 2008 02:30:54 +0000 http://www.labs.com/research/blog/?p=763#comment-20327 [...] Geok Meng Ong of McAfee's Avert Labs said "We have confirmed this vulnerability to be affecting, at least, a fully patched Windows XP SP3 and a Vista SP1 system." The initial exploit uses malformed XML tags to take control of the system, but the problem could be more general, allowing the use of other page elements as attack vectors. [...] [...] Geok Meng Ong of McAfee’s Avert Labs said “We have confirmed this vulnerability to be affecting, at least, a fully patched Windows XP SP3 and a Vista SP1 system.” The initial exploit uses malformed XML tags to take control of the system, but the problem could be more general, allowing the use of other page elements as attack vectors. [...]

]]> http://blogs.mcafee.com/mcafee-labs/yet-another-unpatched-drive-by-exploit-found-on-the-web/comment-page-1#comment-20326 IE 7にゼロデイの脆弱性、月例パッチでは未解決 Thu, 11 Dec 2008 02:24:18 +0000 http://www.labs.com/research/blog/?p=763#comment-20326 [...] SANS Internet Storm Center、McAfee、Secuniaなどの情報を総合すると、脆弱性はXMLタグを処理する際のヒープオーバーフロー問題に起因する。細工を施したHTML文書を使って脆弱性が悪用された場合、任意のコードを実行される恐れがある。[...] [...] SANS Internet Storm Center、McAfee、Secuniaなどの情報を総合すると、脆弱性はXMLタグを処理する際のヒープオーバーフロー問題に起因する。細工を施したHTML文書を使って脆弱性が悪用された場合、任意のコードを実行される恐れがある。[...]

]]>