Author |
Topic |
|
Davio
Development Team Member
Jamaica
12217 Posts |
Posted - 09 November 2004 : 20:45:36
|
By Gregg Keizer, TechWeb News
New versions of the MyDoom worm that began spreading late Monday afternoon are among the fastest-ever exploits of an unpatched Microsoft vulnerability, security experts said Tuesday.
MyDoom.ag and MyDoom.ah, as McAfee dubs the worms, appeared just five days after a bug in Microsoft's Internet Explorer was disclosed by security firms, including Denmark's Secunia. The IE vulnerability, named IFRAME after the HTML tag that can cause a buffer overflow, is being used by the new MyDooms to infect machines. There is no patch available for the flaw in IE.
"We're not surprised to see [the new MyDooms,]," said Alfred Huger, the senior director of engineering for Symantec's security response team, "since it's really simple to exploit this vulnerability.
"It's not quite a zero-day exploit, but it's close," he added.
Read More: http://www.techweb.com/wire/security/52600229 |
Support Snitz Forums
|
Edited by - Davio on 09 November 2004 20:47:04 |
|
Davio
Development Team Member
Jamaica
12217 Posts |
Posted - 09 November 2004 : 20:46:41
|
This vulnerability does not affect XP users that already have Service Pack 2 installed. All other users are proned to this bug in IE. |
Support Snitz Forums
|
|
|
Da_Stimulator
DEV Team Forum Moderator
USA
3373 Posts |
Posted - 09 November 2004 : 21:04:18
|
Glad you talked me out of using IE as my main browser davio as I just un-installed SP2.... |
-Stim |
|
|
Davio
Development Team Member
Jamaica
12217 Posts |
|
HuwR
Forum Admin
United Kingdom
20584 Posts |
Posted - 10 November 2004 : 03:37:43
|
MyDoom.ag and MyDoom.ah only include a Web site link in the transmitting message. Clicking on that link, which hypes an adult Web cam site or claims a $175 PayPal credit awaits
looks like another virus aimed at idiots. If people are stupid enough to click on links in emails they deserve it. |
|
|
|
Topic |
|