New VML exploit found, considered unreliable
1173 views 
Hours after hackers posted public code designed to take advantage of the recently patched Microsoft vector markup language (VML) vulnerability, VeriSign iDefense security researchers discovered a private, in-the-wild exploit attacking the bug.
Users could be affected if they visit a website exploiting the integer overflow vulnerability and if they have not patched their systems with the latest fix, released Jan. 8, said Ken Dunham, director of VeriSign iDefense Rapid Response Team.
But the exploit is not widespread and appears unreliable following a round of tests this morning, Dunham said. "It doesn't work all the time, even if you have an unpatched machine," he told SCMagazine.com today.
According to a Microsoft bulletin, the vulnerability could permit an attacker to execute remote code and take "complete control of an affected system."
Direct link to the exploit
Here is the direct link to exploit - Milworm - MS07-004 VML integer overflow exploit
Another MS07-004 Exploit Released...
Here is the direct link to exploit - Milworm - MS07-004 VML integer overflow exploit (2)
Post new comment