0-day exploit for Internet Explorer in the wild

http://isc.sans.org/diary.html?storyid=5458

by apgwoz • 18 years ago

31 9 18 years ago

isc.sans.org

coolboy89• 18 years ago

http://milw0rm.com/exploits/7403

chime2• 18 years ago

AVG stopped me from extracting that file. Phew!

yan• 18 years ago

Can't gauge if this comment is sarcastic or not..

knome• 18 years ago

I thought the term 0-day was meant to indicate a exploit conceived of and executed before even a full day had passed from the release of the software being attacked. It seemed to come from the game/software cracking scene where the sooner you crack it the more credential you get. It seems to be getting used to mean "new" or "previously unknown to anti-virus writers" or something relatively mundane. Certainly nothing to do with a "0th day" anything, unless I missed something in the link.

utnick• 18 years ago

In hacking circles I believe it means an exploit for a bug that a patch does not currently exist for, or maybe the bug isn't even publicly known.

Jem• 18 years ago

I thought so too.

I did wonder if it's being labelled as 0day because a different patch was released yesterday (but surely that would only work if the patch was directly related to the latest exploit?)

Of course, I could just be over-analysing.

tlrobinson• 18 years ago

"A zero-day (or zero-hour) attack or threat is a computer threat that tries to exploit unknown, undisclosed or patchfree computer application vulnerabilities."

"The term zero-day can also be used to describe warez-group releases of pirated software on or before the release of the software."

http://en.wikipedia.org/wiki/Zero-Day_Attack

I think "zero-day attack/exploit" is basically a euphemism for "oh shit, didn't see that one coming"

0-day exploit for Internet Explorer in the wild

Related Stories