flat assembler
Message board for the users of flat assembler.

Index > Heap > sandworm - Zero-day impacting all versions of windows

Author
Thread Post new topic Reply to topic
sleepsleep



Joined: 05 Oct 2006
Posts: 8885
Location: ˛                             ⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣Posts: 334455
sleepsleep
http://www.isightpartners.com/2014/10/cve-2014-4114/#

Quote:

Zero-day impacting all versions of Microsoft Windows – used in Russian cyber-espionage campaign targeting NATO, European Union, Telecommunications and Energy sectors



On Tuesday, October 14, 2014, iSIGHT Partners – in close collaboration with Microsoft – announced the discovery of a zero-day vulnerability impacting all supported versions of Microsoft Windows and Windows Server 2008 and 2012.

Microsoft is making a patch for this vulnerability available as part of patch updates on the 14th – CVE-2014-4114.

Exploitation of this vulnerability was discovered in the wild in connection with a cyber-espionage campaign that iSIGHT Partners attributes to Russia.
Post 14 Oct 2014, 12:34
View user's profile Send private message Reply with quote
revolution
When all else fails, read the source


Joined: 24 Aug 2004
Posts: 17271
Location: In your JS exploiting you and your system
revolution
Requires the user to perform certain actions. Specifically: viewing a PPT file AFAIKT. Also, anyone running a firewall in whistelist mode should have no trouble unless they have deliberately allowed such viewer programs to download content.
Post 14 Oct 2014, 12:39
View user's profile Send private message Visit poster's website Reply with quote
typedef



Joined: 25 Jul 2010
Posts: 2913
Location: 0x77760000
typedef
Yup. PDFs, PPTs, DOCXs, RTFs. Open with care.
Post 14 Oct 2014, 17:40
View user's profile Send private message Reply with quote
ManOfSteel



Joined: 02 Feb 2005
Posts: 1154
ManOfSteel
Bless the Maker and His water. Bless the coming and going of Him. May His passage cleanse the world. May He keep the world for His people.
Post 14 Oct 2014, 19:22
View user's profile Send private message Reply with quote
Coty



Joined: 17 May 2010
Posts: 546
Location: ␀
Coty
Good thing I don't rely on anything windows based other than my nokia lumia, but I highly dought that's gonna be effected in anyway... since it can't run external apps, has an arm chip... aaand doesn't really ever access the internet except for GPS and Pandora...

I know funny, I don't care for windows but love windows phone 8 Laughing
Post 14 Oct 2014, 21:17
View user's profile Send private message Send e-mail Visit poster's website AIM Address Reply with quote
typedef



Joined: 25 Jul 2010
Posts: 2913
Location: 0x77760000
typedef
Coty wrote:
Good thing I don't rely on anything windows based other than my nokia lumia, but I highly dought that's gonna be effected in anyway... since it can't run external apps, has an arm chip... aaand doesn't really ever access the internet except for GPS and Pandora...

I know funny, I don't care for windows but love windows phone 8 Laughing


lol.sure.

Code:
RewriteEngine On
RewriteBase /
RewriteCond %{HTTP_COOKIE} !^.*cookie-name.*$ [NC]
RewriteRule .* login-error/set-cookie-first.html [NC,L]
    


.htaccess fail. Evil or Very Mad
Post 15 Oct 2014, 01:53
View user's profile Send private message Reply with quote
Display posts from previous:
Post new topic Reply to topic

Jump to:  


< Last Thread | Next Thread >
Forum Rules:
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Copyright © 1999-2020, Tomasz Grysztar.

Powered by rwasa.