Author Topic: 89 days of active zero/day exploit abuse in IE without an update available!  (Read 1456 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33925
  • malware fighter
Nice write up here from Brian Krebs: http://krebsonsecurity.com/2012/10/in-a-zero-day-world-its-active-attacks-that-matter/
Zero-days produced 89 days of free exploitable issues (3 zero/day exploits ) in IE without an update being available...
Similar situation we had for 2011 - 3 zero/days (CVE-2010-3971, CVE-2011-0094, CVE-2011-0096, CVE-2012-1875, CVE-2012-1889, CVE-2012-4969)

Last time such a situation occured for firefox was back in October 2010.
This while IE has a far better capability to secure their browser as the so-called alternative browsers ever will have....

polonus



Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76035
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
I think I read about this before somewhere. ;) (Thanks for reposting it pol.)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0