0 Members and 1 Guest are viewing this topic.
Not really. Unless the malware is already loaded, none of this is really an issue...
This method has not been seen in the wild until today. As we can see, a similar (or pretty much the same) PoC was published almost over 6 years ago. Over the time, no malware misused this.As already mentioned, the vulnerability is there, but its magnitude is more of a pin dropping on the floor than an 8.0 earthquake, when it comes to its impact on the overall security of our customers’ PCs. However, we are looking into this to see how we can prevent these attacks in case we start to see them being misused.
Quote from: Vlk on May 10, 2010, 09:38:52 AMNot really. Unless the malware is already loaded, none of this is really an issue...I would confirm that from my experience - the latest TDSS variant falls under this heading