Slashdot Mirror

← Back to Stories (view on slashdot.org)

New IE 8 Zero Day Discovered

Posted by samzenpus on from the no-shortage dept.

Trailrunner7 (1100399) writes "Researchers have disclosed a new zero day vulnerability in Internet Explorer 8 that could enable an attacker to run arbitrary code on vulnerable machines via drive-by downloads or malicious attachments in email messages. The vulnerability was discovered and disclosed to Microsoft in October, but the company has yet to produce a patch, so HP's Zero Day Initiative, which is handling the bug, published its advisory Wednesday. The ZDI has a policy of disclosing vulnerability details after 180 days if the vendor hasn't produced a patch. The use-after-free flaw lies in the way that IE handles CMarkup objects, and ZDI's advisory says that an attacker can take advantage of it to run arbitrary code."

3 of 134 comments (clear)

  1. American Date Format by labnet · · Score: 5, Insightful

    American Date Format :DIE Already!!!!!!!!!!!
    American Imperial Units: DIE Already!!!!!!!!!!
    American Imperialism : .....[shhh the nsa is listening]

    --
    46137
    1. Re:American Date Format by QuasiSteve · · Score: 5, Insightful

      Remember, Remember, November 5th.

      This day, July 4th, is our Independence Day.

      Hm, no, just don't have the same ring to them that way. Consistency is certainly not one of the strong points of how dates are enunciated in English.

      But at least when dealing with the written form and not as part of prose, yyyy-MM-dd will always have my vote.

  2. Re:why are they taking so long? by Anonymous Coward · · Score: 2, Insightful

    Microsoft was still heavily pushing Windows XP for netbooks in 2009.
    So make that not even 5 years.