4/1/2006

Optimized IE Exploit Speeds Up Infection

Filed under: — By Aviran Mordo @ 8:55 pm

According to Sunnyvale, Calif.-based Fortinet, the exploit — dubbed “JS/CreateTextRange.B” to differentiate it from the original — takes much less time to execute.

“In this version, the time to wait before the execution of the payload (aka hacker’s code and potentially damaging payload) is minimized,” said Fortinet’s alert.

The change could be significant, since the one exploit now in circulation takes 5 to 10 seconds to execute, said Dan Hubbard, senior director of security and research at Websense.

Source: informationweek

 

Leave a Reply

You must have Javascript enabled in order to submit comments.

All fields are optional (except comment).
Some comments may be held for moderation (depends on spam filter) and not show up immediately.
Links will automatically get rel="nofollow" attribute to deter spammers.

Powered by WordPress