Fast Hackers Dispatch IE Trojan ! (Full Version)

All Forums >> [News Around The Web] >> Security News


WinThusiast -> Fast Hackers Dispatch IE Trojan ! (12/29/2004 10:52:46 AM)

It took hackers less than a week to produce a working exploit that attacked a new, unpatched vulnerability in Microsoft's Internet Explorer, security firms said.

Phel.a, a Trojan horse discovered 27 December, attempts to exploit a flaw in Internet Explorer 6.0 dubbed "Microsoft Internet Explorer HTML Help Control Local Zone Security Restriction Bypass" first made public 21 December.

Symantec posted an alert on its website Monday, and rated the exploit as a 1, the lowest in its 1 to 5 ranking system.

The IE vulnerability in IE affects the version included with Windows XP SP2, the massive security update Microsoft rolled out in October.

The vulnerability can result in a compromised, hacker-controlled machine if the user is drawn to the attacker's malicious website.

The Trojan can be planted as part of a HTML page on the site.

If Phel.a successfully executes, it downloads more code from another server, including a backdoor component that can be used by the attacker to later access the infected PC.

The flaws in IE behind this vulnerability were unpatched at the time of writing, although users can stop the Trojan either with anti-virus software or by disabling IE's Active scripting.

Source : PCAuthority

Page: [1]

Valid CSS!

Forum Software © ASPPlayground.NET Advanced Edition 2.4.5 ANSI