root@dafthack:~#‎ > ‎

IE Zero Day

posted Sep 20, 2012, 7:33 AM by Beau Bullock
 
This past Monday a working Internet Explorer exploit was released.  A user visiting a site injected with malicious code using IE 7, 8 or 9 can
be
remotely exploited.  Some resources have recommended moving away from using IE to other browsers such as Google Chrome or Firefox.  This vulnerability in IE can be exploited easily using the Metasploit module that has been developed for it. Microsoft has released a stopgap fix for this but is releasing an official patch(MS12-063) on 9/21/2012.
 
US-CERT Vulnerability Note: http://www.kb.cert.org/vuls/id/480095
Comments