May 29 2009
Earlier this week RIM, the makers of BlackBerry, released a new vulnerability that scores rather high on the CVSS scale. In case you are not familar with CVSS this score is rather high.
It is recommeded that you either patch or apply the workaround as outlined in the RIM advisory.
Dec 11 2008
This week contained the proverbial MSFT patch Tuesday, this set of patches contained 8 advisories patching items from Internet Explorer, MS Office Components, Windows Explorer, etc.. So in all this was a pretty heavy Black Tuesday for MSFT.
The Fail
As MSFT was releasing their patches another group of people were releasing their own little bug. On Tuesday morning as the patches from MSFT were being released several online publications starting reporting a new IE 0day exploit in the wild. All the publicity started here at PC World and from there it just rolls down hill.
The flaw was made public in Chinese language discussion forums two days ago by a security group called the Knownsec team. In tests, it worked on IE 7 running on Windows XP, Service Pack 2.
Since the initial report out of PC World the news starts to spiral out of other media outlets. However nothing good gets published until HD Moore does some really good analysis on the exploit over at the Breaking Point Security blog.
Defenses
Until MSFT releases a patch for this I would recommend switching to another browser.
Oct 23 2008
Caught your eye on that one. It seems there is a new vulnerability/exploit out there that MSFT so “bad” that they have resleased an out of band patch. How bad is it, well let’s just say you should patch all your windows system ASAP. I am not going to analyze this patch again, as many others have done so already.
Just 2 words for you – PATCH IT
As of 11:00 PM PST there is a known working Exploit in the wild in the form of a worm.
Read all about this in teh links below.
Microsoft TechNet Blog Entry more about
Exploit information links below
Good blog entry on the worm/exploit – ThreatExpert
Another Good Entry – Team Furry
Comment as you see fit.
