Avast WEBforum

Other => Viruses and worms => Topic started by: John- on February 13, 2004, 03:08:07 PM

Title: Microsoft Source Leak => new virusses?
Post by: John- on February 13, 2004, 03:08:07 PM

I guess viruswriters will have their hands full. A part of the Windows NT / 2000 source code leaked (about 660 MB from the 20 GB's in total).
Is the treath to new more advanced virusses real? or is this just a hoax?

 ???

Title: Re:Microsoft Source Leak => new virusses?
Post by: Vlk on February 13, 2004, 04:15:38 PM

It's not a hoax at all. It's true - the archive really exists, and seems very complete.

Actually it looks to contain all the core stuff, including the Explorer etc.

Personally I don't think it will have many consequences to the virus arena, though... 99.99% of viruses use holes that have already been discovered by someone else -- relying on the fact that there are many people who don't apply the patches.

To find a new buffer overflow, even with source code, is not an easy task...

Title: Re:Microsoft Source Leak => new virusses?
Post by: kubecj on February 16, 2004, 10:51:19 PM

Quote from: Vlk on February 13, 2004, 04:15:38 PM

To find a new buffer overflow, even with source code, is not an easy task...

But, yesterday was the first exploit based on those sources published on BugTraq. It targets MSIE 5.0 (which sources are most probably in that tarball), but I'll bet we'll get advanced exploits soon.

Title: Re:Microsoft Source Leak => new virusses?
Post by: igor on February 17, 2004, 09:17:55 AM

And in my opinion, quite a nasty one...
For some time, I was wondering if this kind of exploit would appear... and now it's here.  :-\