 Microsoft April Security Updates - Ms08-021 Exploit In-the-wild |
Welcome Guest ( Log In | Click here to Register a free account now! )
Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.  |
  Apr 11 2008, 03:57 PM
Post
#1
|
|
 Security Reporter  Group: News Reporters Posts: 483 Joined: 10-April 04 From: Roanoke, Virginia Member No.: 107  |
 It is advised that folks apply the April updates as quickly as possible using the Windows Update process Microsoft April Security Updates - MS08-021 Exploit in-the-wild http://isc.sans.org/diary.html?storyid=4274 www.symantec.com/security_response/threatcon/index.jsp QUOTE: The ThreatCon is currently at Level 2. The DeepSight honeynet has observed in-the-wild exploit attempts targeting a GDI vulnerability patched by Microsoft on April 8, 2008. The malicious image appears to target the Microsoft Windows GDI Stack Overflow Vulnerability (BID 28570). At least three different sites are hosting the images; two different malicious binaries are associated with the attacks. Analysis of the images has shown that although they appear to be malicious, they do not contain enough data in the associated image property to sufficiently trigger the vulnerability. We are still investigating as to why this may be the case. Users are advised to apply the MS08-021 patches immediately. These attack attempts highlight the severity of this issue -- it is only a matter of time before new images that successfully trigger the issue are observed in the wild. -------------------- |
 |
 
|
|
Apr 27 2008, 05:14 AM
Post
#2
|
|
 Senior Member Group: HJT Junior Classmen Posts: 438 Joined: 23-November 07 From: California Member No.: 171,969 |
So images are causing these malicious things to download or something? >_<
I don't wanna bring out IE again... sigh. Thanks for update 
-------------------- "If a man is offered a fact which goes against his instincts, he will scrutinize it closely, and unless the evidence is overwhelming, he will refuse to believe it. If, on the other hand, he is offered something which affords a reason for acting in accordance to his instincts, he will accept it even on the slightest evidence. The origin of myths is explained in this way." - Bertrand Russell
|
|
|
|
|
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
| Lo-Fi Version | Time is now: 5th July 2008 - 04:50 PM |
© 2003-2008 All Rights Reserved Bleeping Computer LLC.