Microsoft: 0Day Exploit Targeting Word, Outlook

Re:Microsoft: 0Day Exploit Targeting Word, Outlook by mysteriousllama on Monday March 24, 2014 @09:40PM (#7463175)

I do wish they would tell us if EMET[1] is an effective mitigation for this vulnerability or not. Considering it involves memory corruption it's likely.. But finding out the hard way would be no fun.

[1] http://support.microsoft.com/kb/2458544

[ Parent | on HN ]

Re:Microsoft: 0Day Exploit Targeting Word, Outlook by pedro84 on Monday March 24, 2014 @09:47PM (#7463215)

"First, our tests showed that EMET default configuration can block the exploits seen in the wild."

http://blogs.technet.com/b/srd/archive/2014/03/24/security-a...

[ Parent | on HN ]

Re:Microsoft: 0Day Exploit Targeting Word, Outlook by lawnchair_larry on Monday March 24, 2014 @11:34PM (#7463660)

It's usually the case that EMET blocks the "standard" exploit, but it can be bypassed with a little more work. It depends on the bug, but there are real world cases for which many have exploits that fully bypass EMET with all settings on.

[ Parent | on HN ]