Slashdot Mirror


IE Flaw Exploit In Hacker Kit 'Raises the Stakes'

CWmike writes "Roger Thompson, chief research officer of AVG Technologies, said Sunday that an exploit for the newest IE flaw had been added to the Eleonore crimeware attack kit. 'This raises the stakes considerably, as it means that anyone can buy the kit for a few hundred bucks, and they have a working zero-day,' Thompson said on his company's blog. Microsoft has promised to patch the vulnerability, but last week said the threat didn't warrant an 'out-of-band' update. Microsoft will deliver three security updates Nov. 9, but won't fix the IE bug then."

4 of 96 comments (clear)

  1. ie sucks by Anonymous Coward · · Score: 2, Funny

    IE is such a poor piece of technology. Before I enter a serious relationship, in addition to a background check, I also investigate the browser my potential significant other is using. If it's IE, I don't even bother since I don't date dummies.

  2. Re:Bug is really for Windows XP by benjamindees · · Score: 4, Funny

    And it's even possible for a browser to alter the registry exactly why???

    Broken Windows create jobs.

    --
    "I assumed blithely that there were no elves out there in the darkness"
  3. Re:Bug is really for Windows XP by CarpetShark · · Score: 3, Funny

    "Broken Windows create jobs."

    I'm a window cleaner, you insensitive clod.

  4. Re:Bug is really for Windows XP by RaymondKurzweil · · Score: 2, Funny

    Fuck you... this is an issue of a fundamental freedom. An application as powerful and useful as a browser should have the right to alter an setting in the registry it wants!!