MSMVPS.COM

The Ultimate Destination for Blogs by Current and Former Microsoft Most Valuable Professionals.
Welcome to MSMVPS.COM Sign in | Help
in Search

Harry Waldron - Microsoft MVP Blog

Security News and Best Practices for corporate and home users

Internet Explorer Vulnerability - McAfee has provided enhanced protection

  McAfee and other AV vendors are adding enhanced protection to cover some of the exploits that are begining to emerge in the wild.

Internet Explorer Vulnerability - McAfee has provided enhanced protection
http://vil.nai.com/vil/content/v_139047.htm

Quote: -- Update March 24, 2006 --  The risk assessment of this threat has been updated to Low-Profiled due to media attention at:

http://news.com.com/Dangerous+code+on+Net+could+be+used+to+exploit+IE+hole/2100-1002_3-6053456.html?tag=cd.top

An EXTRA.DAT file may be downloaded via the McAfee AVERT Extra.dat Request Page (the cmd-line scanner / email / gateway restrictions are not present in the extra.dat file. However, scanning for unknown macro and script viruses must be enabled).

This detection covers code attempting to exploit a Microsoft Internet Explorer "createTextRange()" Code Execution vulnerability. This exploit was first seen on March 22, 2006 in Denial of Service (DoS) form. On March 23, 2006, code execution exploits began to appear. The 4726 DAT files contain enhanced JS/Exploit-BO.gen detection to cover those code execution exploits.

This detection covers code attempting to exploit a Microsoft Internet Explorer "createTextRange()" Code Execution vulnerability. This exploit was first seen on March 22, 2006 in Denial of Service (DoS) form. On March 23, 2006, code execution exploits began to appear. The 4726 DAT files contain enhanced JS/Exploit-BO.gen detection to cover those code execution exploits.

Only published comments... Mar 24 2006, 10:33 PM by Harry Waldron

Leave a Comment

(required) 
(optional)
(required) 
Submit
Powered by Community Server (Commercial Edition), by Telligent Systems