Researcher publishes exploit for new IE hole

[DKT27]

Moshe Ben Abu announced his Internet Explorer exploit on Twitter.

An Israeli security researcher has published exploit code for an unpatched hole in Internet Explorer that Microsoft disclosed two days ago.

Microsoft had warned in

an advisorythat a new vulnerability in IE 6 and IE 7, which could allow an attacker to take control of a computer, had been targeted in attacks .

Releasing the exploit code publicly increases the chances of attacks on the zero-day hole and could pressure Microsoft to issue a patch before its next scheduled Patch Tuesday in four weeks.

Researcher Moshe Ben Abu announced his work in a

blog post on Wednesday and said it was being included in the open-source Metasploit exploit database.

He was able to create the exploit code after figuring out where an existing exploit was in-the-wild based on information in a McAfee blog post, he told Ryan Naraine of the

Zero Day blog at CNET sister site ZDNet. It took him about 10 minutes to de-obfuscate the exploit and pinpoint the vulnerability, he said.

Microsoft's advisory on the vulnerability includes information on workarounds but suggests that IE 6 and IE 7 users upgrade to IE 8 immediately.

Source -

CNET

[HX1]

You know.. I think if people would just upgrade, and take it on.. it would be great.. there would be far less problems if they just bit the bullet, upgraded their resources for IE8, and installed it on their systems.. What kills me is when you go to a place that DEMANDS you use IE6, have you submit information and then their databases and systems are all jacked up.. Makes you wonder... Is it self sabotage from hatred of the job.. or what? A bit Self-Destructive if you ask me... Marketing disguised? What's going on there? I don't like things I have to question.. at ALL..

Oh and I almost forgot.. then they want to RDP you because they claim its on your end..LOL... What a freakin' joke... I think thats when I filter out their whole network.. :thumbsup: