Top 5 Optimizers technical rumors » bug

Zero-Day patch for Microsoft Internet Explorer 6 and 7

admin — Mon, 21 Dec 2009 15:42:39 +0000

A dangerous vulnerability in Internet Explorer became known to publicity before a fix was available, raising the probability of zero-days attacks. The new bug involves the way IE handles Cascading Style Sheets objects(CSS is currently the most popular web-design technique), and could allow an attacker to execute any type of code on a targeted Windows XP, Vista, Server 2003, or Server 2008 computer. Internet Explorer 8 was not affected by this bug, and currently you can аix the vulnerability with a patch.

Metasploit Releases IE Attack but calls it “unreliable”

admin — Thu, 26 Nov 2009 15:16:19 +0000

The Microsoft Internet Explorer security bug that was disclosed last week yet again takes our attention – this time developers of the open-source Metasploit penetration testing toolkit have released code that can compromise IE browser, however the code cannot be called reliable. As the developers said tehmselves – the bug is unreliable, you can’t be sure that you will be able to compromise one’s browser. As stated by Microsoft – there hasn’t yet been any attacks using this exploit in the wild. As stated by the software giant, only IE versions 6 and 7 may be effected and Microsoft has already released a Security Advisory that offers workarounds to guard against the flaw.

Software makers scrambling to fix bug in net’s security

admin — Sat, 07 Nov 2009 12:35:20 +0000

Software makers arounf the world are scrambling to fix a certain and very serious bug in the technology that is used to securily transfer the information on the internet. The problem lies in Security sockets Layer protocol used for safe browsing, and altough the flaw can only be exploited under certain circumstances, it could be used to hack into filesharing servers, mail servers, databases and many other secure applications. As it is so widely used, the SSL protocol is under very close watch by security specialist and researchers. We should expect a number of patches to be available soon to fix the problem, as the bug was the main theme for discussions lately.