News for hackers. Stuff that matters.

A comment on Internet Explorer users face drive-by attacks targeting new 0-day bug. Parent comment

Re:Internet Explorer users face drive-by attacks targeting n... by jonchang on Sunday November 10, 2013 @09:32PM (#6709590)
It's the recent TIFF code execution bug found in Office 2010 and earlier. See https://news.ycombinator.com/item?id=6678957 for discussion.
[ Parent | on HN ]
Re:Internet Explorer users face drive-by attacks targeting n... by code_duck on Sunday November 10, 2013 @10:12PM (#6709733)
That, plus a separate exploitable hole in IE/Windows.

> The vulnerabilities in various configurations of IE versions 7, 8, 9, and 10 running on Windows XP and Windows 7 are separate from the Microsoft Windows and Office graphics flaw that's also under active exploit at the moment.

> One flaw allows attackers to access and control computer memory, and another leaks system information needed to capitalize on the first bug.

[ Parent | on HN ]