https://insinuator.net/tags/0-day/ Recent content in 0-Day on Insinuator.net - Bold Statements Hugo en-us Tue, 13 May 2014 00:00:00 +0000 https://insinuator.net/2014/05/the-role-of-vgx.dll-in-the-context-of-the-latest-ie-0-day/ Tue, 13 May 2014 00:00:00 +0000 https://insinuator.net/2014/05/the-role-of-vgx.dll-in-the-context-of-the-latest-ie-0-day/ <p>On Saturday, April 26 Microsoft announced that Internet Explorer version 6 until version 11 is under potential risk against drive-by attacks from malicious websites, regardless of the underlying Microsoft operating system and the associated memory protection features integrated with the operating system. Microsoft has assigned CVE-2014-1776 to this unknown use-after-free vulnerability, which in the worst case could allow remote code execution if a user views a specially crafted website. If an attacker successfully exploits this vulnerability, s/he will gain the same rights and privileges as the current user (once again, activated User Account Control [UAC] helps keeping privileges of the user low).</p> https://insinuator.net/2012/09/microsoft-advisory-2757760-windows-internet-explorer-zero-day-vulnerability/ Wed, 19 Sep 2012 00:00:00 +0000 https://insinuator.net/2012/09/microsoft-advisory-2757760-windows-internet-explorer-zero-day-vulnerability/ <p>Actually a Windows Vulnerability (<a href="http://technet.microsoft.com/en-us/security/advisory/2757760">Microsoft Advisory 2757760</a>) related to the Internet Explorer Version 7, 8 and 9 is in the news. Microsoft is aware of the problem, but there’s no patch available yet. We call this a 0-Day :-). Making the problem even worse, on monday reliable <a href="https://community.rapid7.com/community/metasploit/blog/2012/09/17/lets-start-the-week-with-a-new-internet-explorer-0-day-in-metasploit">exploit code</a> was released within the Metasploit project, so exploit code is already in the wild.</p> <p>Basically Microsoft suggests two workarounds:</p> <ul> <li>Usage of EMET <a href="http://support.microsoft.com/kb/2458544">(Enhanced Mitigation Experience Toolkit</a>)</li> <li>Disabling Active X and Active Scripting in the Internet Settings</li> </ul> <p>But both of them have some impact: EMET must be deployed before any usage (btw. EMET can be configured via Group Policies) and disabling Active X and Active Scripting might break some business relevant web sites (that can be added to the “Trusted Sites” Zone, but might produce major operational effort).</p>