Unpatched DLL bugs let hackers exploit Windows 7 and IE9, says researcher
Although Microsoft has patched multiple DLL load hijacking vulnerabilities since last summer, Windows and Internet Explorer 9 (IE9) can still be exploited, a security company warned today.
Microsoft confirmed that it's investigating the claims by Slovenia-based Acros Security. Researchers from Acros will demonstrate the new attacks at the Hack in the Box security conference in Amsterdam later this month.
"We'll reveal how IE8 and IE9 can be used on Windows 7, Vista and XP for attacking users without any security warnings, even in 'Protected mode,' and how to remotely make many seemingly-safe applications, for example, Word 2010 and PowerPoint 2010, vulnerable," said Acros CEO Mitja Kolsek in a Friday email.L33tdawg: Registration for the quad track conference is still open till the 16th and details of the ACROS presentation is here
