Back in the old days hardware manufacturers felt safe in the knowledge that no mere hardware hacker could attempt to recreate their inventions. From Sony to Philips to LG to Samsung, the consumer... read more
Featured Slideshow
Microsoft advises on IE zero-day vulnerability
Submitted by l33tdawg on Thu, 2014-02-20 06:32
Microsoft has issued a security advisory for a vulnerability in Internet Explorer 9 and 10 being exploited in the wild.
We wrote last week on the initial reports of exploits in the wild, as reported by security firm Fireeye. Fireeye and Symantec are both credited in the Microsoft advisory as having worked with Microsoft on the issue.
The vulnerability is a "use after free" remote code execution vulnerability. As in the case found by Fireeye, it can lead to a system being taken over if the user is lured to visit a web site in a vulnerable browser. The vulnerability does not, on its own, elevate privilege, so if the user is running unprivileged, the exploit will also be unprivileged.
Source:
- 1935 reads
