As many of you will have seen in the news today there is a security flaw in IE (Internet Explorer 7) that allows hackers to remotely execute code just by visiting an infected website.
This is all a MASSIVE over hype. The media and even Susses Uni ITS have got themselves all worked up over what is essentially a routine event.
These kind of zero-day remote code exploits happen on average at least 1-2 times per month! There is no reason as yet why this one is so important.
Currently the Symantic threatcon is at 2. This is only just above normal. Over the last 3 months its been at level 3 or above on multiple ocassions! It really p’s me off when the media blows things like this out the water and scares users.
Now onto the technical. This exploit uses a vulnerability in DHTML handling to execute arbitrary code when the browser crashes.
If you run Vista with UAC on (those annoying Are you sure? prompts that come up every time you try to copy a file…) then the exploit should be limited to Local Low privileges and the damage should be minimal. If you run Firefox, Opera, Crome or Safari you don’t need to worry as the exploit does not effect you. A patch for everyone else will be released later today so make sure you run Windows Update this evening. But honest to god unless your looking at chineese porn while buying a plasma TV using an XP machine running IE7 with no firewall and AV then the chances of this exploit causing you any damage is negligible.
Post any comments or questions below.