Wifi Password Recovery - UTM - Vulnerability Scanning
 

   

    
Toll Free: +1-888-704-7297

Sun Sun Sun

You are here: News > News > Internet Explorer Takes a Knee from New Attack

» IT Security NEWS
 
» 24 November 2009
Internet Explorer Takes a Knee from New Attack

An anonymous cyber attacker had just posted a CSS-based (Cascading Style Sheet) attack code last Friday that could be utilized to penetrate into a computer that's using older iterations of the ubiquitous-but-often-loathed Microsoft Internet Explorer (IE) web browser. The script was spotted at the Bugtraq mailing list, and it was sent there by an unidentified hacker. Symantec, which is one of the world leaders in IT security wares, identifies the code as an inconsistent one that doesn't always work, but when it does, it can be used to install unauthorized programs on a targeted machine.

The security vendor then reported on its website last Saturday that it has conducted a battery of tests on the matter and has confirmed that the attack code directly targets IE versions 6 and 7. The company's team of experts then surmised that a fully functional and dependable exploit based on the code will probably appear later on in the near future because the script was already published for the public consumption of tech-savvy cyber terrorists.

Meanwhile, a security consultancy by the name of Vupen Security echoed Symantec's analysis in terms of the effectiveness of the attack. The consultancy also delved into details like the fact that the code specifically worked on the Windows XP Service Pack 3 platform that runs IE 6 or IE 7. However, neither of the two IT security companies was able to verify whether or not the attack worked on the Microsoft Corporation's newest and latest web browser, IE 8.

Moreover, Symantec said nothing in its report about the attack being presently used by any of the virtual villains, cyber criminals, or hacker hooligans populating the information superhighway. Then again, because IE's earlier versions are still some of the most used applications when surfing the Internet (despite Firefox's impressive rise to the top of the browser heap), this kind of code remains highly valued by web terrorists of all walks of life.

If an exploit based on this code does come out, Microsoft will probably rush out an emergency fix or include it on an important Patch Tuesday update by next month. As of this writing, Microsoft couldn't be reached for comment on the matter. As a side note, both IE 6 and IE 7 have cornered the browser market by accruing nearly forty percent of overall shares.

 

Click Here For Web Shop

Reviews of SecPoint.com
 
 
 
 
 

Subscribe to our Mailing List
Customer References
 
More satisfied customers
   
aAwards & Reviews
 

View more awards..

Free Services
Free Vulnerability Scan

Free WiFi Security Guide

Encyclopedia | Free Scan Statement | Link Policy | Privacy Statement | Resources | Sitemap | User Policy
© Copyright 1999-2012: SecPoint®
SecPoint ApS Noerregade 7B - 1165 Copenhagen K - Denmark
US Toll free: +1-888-704-7297 - EU: +45-70-235-245