Slashdot Mirror
Zero-Day IE Exploit Takes Control of PCs
anethema writes "A remote IE exploit with implementations is currently in the wild. From the article: 'Exploit code for a critical flaw in fully patched versions of Microsoft Corp.'s Internet Explorer browser has been released on the Internet, putting millions of Web surfers at risk of computer hijack attacks.' Aparently all you have to do is browse the page to be affected. There is no patch, but since it is a JavaScript exploit, you can work around it by disabling JavaScript."
From eWeek: The group that published the exploit said Microsoft has been aware of the Javascript Window() vulnerability for several months but was mistakenly treating it as a low-priority denial-of-service flaw.
Because anything that allows a malicious user to exploit your system and hijack isn't a flaw... it's a feature!
GetOuttaMySpace - The Anti-Social Network
Microsoft's total time of 0wnerzship continues to decrease.
Its important for MS to keep ahead in this area.
WhiteWolf666 an exBush supporter. All you new-school,compassionate,save the children Republicans can rot in hell
Ah, the Firefox of Opera - who is that, Pavarotti?
I use netcat.
-- MartinG To mail me: echo kewyjlcxyzvjfxbqwh | tr bcefhjklqvwxyz
Now that you've read the comments, your Windows box belongs to OSTG. Please stand by while we load Linux.........
This sig isn't original enough, it's time to come up with something witty...
Well, there might be no customer impact at this time, but seeing as the exploit is published now, can I ask you again in about 5 minutes?
Drag n' Drop DVD Recommendations
This why I use a mainframe. Micros are just toys, bad enuff they have crummy hardware but their software is crap too.
The sun has risen this morning, and the Earth is rotating around its axis.
Nothing to see here - move along.
Make even shorter URLs - 8LN.org
I don't browse the web.
Be a real patriot: Question authority. Think for yourself. Formulate your own conclusions.
I use telnet and render the HTML mentally.
I use lynx....
Only to be stricken by sloppy internal perception code causing random synapse firings building to a pace that you suddenly just start breakdancing.
Oh, wait... it just seems that way. Carry on...
What, no link?
You say that in jest, but imagine the possibilities for exploits when/if we get the point of direct neural implants for communications and such. Just imagine, instead of porn popups, lockups, and reboots we'll have people suddenly yelling about viagara at the top of their lungs, freezing up and falling over mid-stride, and suddenly forgetting where they are.
:)
Maybe anyway
The holidays are a time for giving.
Now that you've RTFA, and you are now looking at the comments page, the staff of Slashdot and EWeek would like to thank you for visiting our web pages and giving us full control of your windows PCs.
Happy Holidays!
- Donny was a good bowler, and a good man.
You've met my grandfather, I take it.
Two of those three would apply to the current crop of US politicians. All three if you count Bob Dole.
I am pretty sure MS anti-spyware will stop this from launching
He who knows best knows how little he knows. - Thomas Jefferson
"I use telnet and render the HTML mentally."
You get used to it. I don't even see the code. All I see is blonde, brunette, redhead.
Georgia Tech, the leader in Chia(tm) technology.
Isn't Google's master plan to take over the world dependent upon people using AJAX? If IE has a critical flaw using javascript, and everyone has to turn it off, then nobody will be able to use Google's new products and... Hey wait a minute.
Best. Comment. Ever. Enjoy!
I phone the webmaster and ask him to read me the webpage.
Georgia Tech, the leader in Chia(tm) technology.
MS-DOS or DR-DOS? I don't know which one is worse.
DOH! http://validator.w3.org/check?uri=http%3A%2F%2Fwww .comm.utoronto.ca%2F%7Eeckford%2F
Result: Failed validation, 7 errors
"When life gives you lemons, don't make lemonade. Make life take the lemons back!" -- Cave Johnson
solution:
Buy sony cd,
install rootkit
rename Explorer to $sys$explorer.exe
The Code Ninja is swift with his tool, precise in his delivery, and deadly accurate in his execution.
There is an exploit that my computer suffers from every day. It's called the 'Slash.ORG' worm, and it doesn't matter what kind of browser you use. Once the browser navigates to a certain website, it tends to stay there, refreshing as needed. It's called a DoPE attack, or 'Denial of Productivity for Employer.'
Dark Reflection
The phones are tapped.
US Mail, baby.
Didn't anyone see The Postman
Have you people not got the facts? Browsing the web using Microsoft Windows - and especially when using the excellent Microsoft Internet Explorer is proven to much more secure than using those namby-pamby, tree-hugging, communist hippy programs you can get, like that Linux thing and Firefox. I mean, no-one uses those things anyway, do they? I always make sure that I am fully patched, and that my anti-spyware and anti-virus programs and up to date. Every morning I check through my root-kit and trojan scanner reports, right after my defrag has finished. I know for a fact that this so-called exploit hasn't affected me in th [NO CARRIER]