Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Exploit against MS07-033 being used in the wild SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Exploit against MS07-033 being used in the wild

The Symantec folks identified a website exploiting a bug from this months Microsoft patches, specifically the Microsoft Internet Explorer Speech API 4 COM Object Instantiation Buffer Overflow Vulnerability.  Here is the URL to their blog entry:

http://www.symantec.com/enterprise/security_response/weblog/2007/06/deepsight_honeynet_detects_obf.html

Apparently, the actual exploit is similar to the proof of concept code posted on a popular exploit site ten days ago.

 Kyle

112 Posts
Jun 23rd 2007
Thread locked Subscribe Jun 23rd 2007
1 decade ago

Sign Up for Free or Log In to start participating in the conversation!