A new zero-day attack affecting IE 6 browsers has been discovered. VeriSign’s iDefense have confirmed that numerous dodgy porn websites are already exploiting this flaw.
By merely clicking a link, malicious software can be loaded, unbeknown to the user, onto a vulnerable Windows PC. French Security Incident Response Team and Secunia have given the problem their most serious rating. Evidence has been uncovered that nasty porno sites are using this flaw to install vast amounts of adware on to people’s machines. A Windows component called “vgx.dll” is responsible for the flaw.
Microsoft plans to fix the flaw as part of its monthly patching cycle on 10 October, but this will mean that the problem will persist for even diligent users until that time. The fix will not come anywhere near soon enough, according to Websense, who expect that the number of attacks utilising this flaw will explode.
Source: TechSpot
Articles RSS