Re: IE attack...

[Alexander Sotirov <asotirov () determina com>]

Dave Aitel wrote:
> So this is the IE attack various sites are owning people with...I
> stumbled on it while browsing random things. It's been a pretty bad
> week for IE this week. Of course, it's been a pretty bad year for IE.
> Been a pretty bad time all around for IE. Motto: "Giving Host
> Intrusion Prevention vendors case study after case study."
>
> I don't know why the other lists aren't posting this. Maybe there was
> a memo that went around where you try to keep people from knowing what
> they're actually at risk from.

This code has been up on milw0rm.com since for a day or two already. The exploit
works fine by filling the heap with shellcode, but if you want a more precise
exploitation method, you'll have to go read Halvar's recent Blackhat
presentation. It's an uninitialized stack variable vulnerability.

Alex