Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: WhiteZero on January 16, 2010, 06:08:53 PM

Title: Protection against the IE 0-day exploit "Aurora"?
Post by: WhiteZero on January 16, 2010, 06:08:53 PM
I don't use IE myself, but a lot of my friends and family do.
I wonder if Avast's Web Shield can protect against the "Aurora" IE exploit?
http://praetorianprefect.com/archives/2010/01/the-aurora-ie-exploit-in-action/
Title: Re: Protection against the IE 0-day exploit "Aurora"?
Post by: Marc57 on January 17, 2010, 04:35:56 AM
I would like to know this also.
Title: Re: Protection against the IE 0-day exploit "Aurora"?
Post by: WhiteZero on January 18, 2010, 03:08:53 AM
This is a pretty heavy issue and I think we need an answer on it.
Title: Re: Protection against the IE 0-day exploit "Aurora"?
Post by: DavidR on January 18, 2010, 04:02:54 AM
Since this is script based, e.g. using the HTML script tag, that should get scanned by the web shield and to date the web shield has been extremely good at this kind of obfuscated script detection.

That however is not official as I'm just an avast user like yourselves.

Personally I would be giving IE a wide berth (certainly until any 0-day exploit was resolved) and using firefox and NoScript as my default browser.
Title: Re: Protection against the IE 0-day exploit "Aurora"?
Post by: Gopher John on January 18, 2010, 07:48:41 PM
Since this is script based, e.g. using the HTML script tag, that should get scanned by the web shield and to date the web shield has been extremely good at this kind of obfuscated script detection.

That however is not official as I'm just an avast user like yourselves.

Personally I would be giving IE a wide berth (certainly until any 0-day exploit was resolved) and using firefox and NoScript as my default browser.

I'm also using Firefox with NoScript.  For IE8 on WinXp Pro SP3, I set Internet Security to High, and verified that hardware DEP was enabled for IE8(is default setting) per http://www.microsoft.com/technet/security/advisory/979352.mspx (http://www.microsoft.com/technet/security/advisory/979352.mspx)