Porn scammers hit new IE vulnerability

Powered by SC Magazine
 

Adult sites exploiting VML bug to install malware.

Reports surfaced today of a vulnerability in Microsoft's Internet Explorer that is actively being exploited by cyber-criminals to install and run malware on affected systems.

Sunbelt Software first detected the attacks, which appear to be linked to a group of adult websites hosted in Russia. 

Secunia has given the vulnerability a rating of 'extremely critical', its highest alert level. The security vendor suggests that users deactivate active scripting and only view trusted sites, avoiding unsolicited or suspicious links. 

Sunbelt recommended that disabling JavaScript may also help to mitigate the attacks.

The attack exploits a vulnerability in Internet Explorer's Vector Markup Language (VML), a software component used to display images.

It is launched when the user views a specially crafted web page encoded with the VML exploit that allows the attacker to remotely execute code without the user's knowledge.

A spokesman for Microsoft confirmed the reports to vnunet.com and said that a fix is scheduled to be released as part of the company's next security update due on 10 October. 

News of the VML exploit comes just days after another highly critical vulnerability was found in the browser's ActiveX component that could allow for remote code execution. No evidence exists that attackers are actively exploiting this flaw.

Copyright ©v3.co.uk


Porn scammers hit new IE vulnerability
 
 
 
Top Stories
Photos: iTnews Benchmark Awards countdown begins
Just a few days left until entries close for 2014.
 
Australian Govt to rethink cyber security strategy
Six-year old policy to be refreshed.
 
The failure of the antivirus industry
[Blog post] Insights from AVAR 2014.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  39%
 
Your insurance company
  3%
 
A technology company (Google, Facebook et al)
  8%
 
Your telco, ISP or utility
  7%
 
A retailer (Coles, Woolworths et al)
  2%
 
A Federal Government agency (ATO, Centrelink etc)
  20%
 
An Australian law enforcement agency (AFP, ASIO et al)
  15%
 
A State Government agency (Health dept, etc)
  5%
TOTAL VOTES: 1023

Vote