|
<editorial>
And going off on a tangent here... Have we changed the meaning of
"Zero Day Vulnerability"? According to my understanding, and as
corroborated by Wikipedia, a "Zero-day attack" refers to a situation
where "There are zero days between the time the vulnerability is
discovered (and made public), and the first attack." But in this
case we have not yet seen any attack, so it would be more proper to
refer to this as an n-day vulnerability, where n indicates the number
of days since the vulnerability was discovered. Or has "0-day"
suffered journalistic inflation, like so much of our terminology? If
every discovered vulnerability is now considered "0-day", then what
function does the modifier "0-day" serve? What then makes a "0-day"
vulnerability different from a non 0-day vulnerability?
This is much like the misused term DDoS, where in many cases the
first "D" is irrelevant and simply DoS would serve. Sigh.
</editorial>
-- dkm
At 4/29/2014 11:29 AM Tuesday, David Graff wrote:
>I agree that this is sensationalist. We have arbitrary code execution
>vulnerabilities against Flash, Acrobat, and Java all the time and those have
>active user bases on par with IE these days. What's one more way to
>infiltrate an XP system?
>
>But, if you're looking for mitigation against unpatched buffer overrun
>attacks Windows, its worth installing the EMET package from Microsoft and
>accepting the default config which will run DEP and SEHOP in opt-out mode.
>
>http://www.microsoft.com/en-us/download/details.aspx?id=41138
>
>Hopefully the IE sandboxing that UAC creates is also containing this attack
>for anything running Vista and newer.
>
>On Mon, 28 Apr 2014 14:41:39 -0400, David McFarlane <[log in to unmask]> wrote:
>
> >Yet another (less alarmist) perspective on
> >this:
> >http://steve.grc.com/2014/04/28/a-quick-mitigation-for-internet-exp
> lorers-new-0-day-vulnerability
> >
> >-- dkm "What, me worry?"
> >
> >
> >At 4/28/2014 08:57 AM Monday, Murray, Troy wrote:
> >>Zero-day exploit in every version of Internet Explorer discovered
> >>late yesterday, and XP won't be patched when a fix is released.
> >>
> >><http://gizmodo.com/new-vulnerability-found-in-every-single-versio
> n-of-inte-1568383903/+whitsongordon?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+lifehacker%2Ffull+%28Lifehacker%29>http://gizmodo.com/new-vulnerability-found-in-every-single-version-of-inte-1568383903/
|
