Printable View
Original advisory issuer : http://www.csis.dk/dk/nyheder/nyheder.asp?tekstID=799Quote:
A 0-day exploit within the msVidCtl component of Microsoft DirectShow is actively being exploited through drive-by attacks using thousands of newly compromised web sites, according to CSIS. The code has been published in the public domain via a number of Chinese web sites.
ISC : http://isc.sans.org/diary.html?storyid=6733
This isn't up on secunia as of now.
Be sharp.
Since this it the first we've heard about it, isn't it a 1-day exploit?
Sorry...
/me returns you to the regularly scheduled conversation.
You must be thinking of racehorses :DQuote:
Since this it the first we've heard about it, isn't it a 1-day exploit?
Exploits are 0-day on the day they are released, or used on the public. As this is frequently impossible to determine, it seems to be a sort of convention to take the day of first advisory/warning?
It basically means "today", 1-day would be "yesterday".
:)
Nihil, Could you merge this with my other post?