Stuxnet Attacks Used 4 Windows Zero-Day Exploits

abadnog writes "The attackers behind the recent Stuxnet worm attack used four different zero-day security vulnerabilities to burrow into — and spread around — Microsoft's Windows operating system, according to a startling disclosure from Microsoft. Two of the four vulnerabilities are still unpatched. Microsoft said the attackers initially targeted the old MS08-067 vulnerability (used in the Conficker attack), a new LNK (Windows Shortcut) flaw to launch exploit code on vulnerable Windows systems and a zero-day bug in the Print Spooler Service that makes it possible for malicious code to be passed to, and then executed on, a remote machine. The malware also exploited two different elevation of privilege holes to gain complete control over the affected system."

Comments

That's why I also run Windows....

[rts008]

I like user-friendly[1] screen doors to enter my submarine! ;-)

Ghahh! Where's all of that water coming from?
All hands, 'Abandon ship!'

[1] and hacker/cracker friendly, spammer friendly, gov't. friendly, and criminal friendly