IE zero-day attack used to hijack GMail accounts

[no1_vern]

'State-sponsored attackers' using IE zero-day to hijack GMail accounts | ZDNet

By Ryan Naraine | June 13, 2012, 9:36am PDT

Summary: Microsoft’s advisory speaks of “active attacks” and follows a separate note from Google that references the IE flaw “being actively exploited in the wild for targeted attacks.”

Microsoft and Google have separately warned about a new Internet Explorer zero-day being exploited to break into GMail accounts.

The browser flaw, which is currently unpatched, expose Windows users to remote code execution attacks with little or no user action (drive-by downloads if an IE users simply surfs to a rigged site).

Microsoft’s advisory speaks of “active attacks” and follows a separate note from Google that references the IE flaw “being actively exploited in the wild for targeted attacks.”

Microsoft’s explanation of the issue

The vulnerability could allow remote code execution if a user views a specially crafted webpage using Internet Explorer. An attacker would have no way to force users to visit such a website. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email message or Instant Messenger message that takes them to the attacker’s website. The vulnerability affects all supported releases of Microsoft Windows, and all supported editions of Microsoft Office 2003 and Microsoft Office 2007.

The vulnerability exists when MSXML attempts to access an object in memory that has not been initialized, which may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the logged-on user.

[GroundZero3]

Simple fix use another browser

[Taxmancometh]

Another reason why I hate IE and love Firefox.

[The Birdman 472]

I should probably stop using IE these days with all of its security vulnerabilities. I'll probaly switch to Firefox.

[Taxmancometh]

Go for it! And when you do be sure to download the add-ons Noscript and adblock. In Noscript's settings you can enable base second level domains to be exempt. It can be cumbersome but it will stop the crap malware from entering your computer from the begin with.

Couple more add-ons to install. Do not track plus and Betterprivacy.

[The Birdman 472]

I will download it next week. Thanks for the suggestions of add-ons!

[Taxmancometh]

https://addons.mozilla.org/en-US/fir...pt/?src=search

https://addons.mozilla.org/en-US/fir...us/?src=search

https://addons.mozilla.org/en-US/fir...us/?src=search

https://addons.mozilla.org/en-US/fir...cy/?src=search