Daily using/supporting

Get Firefox browser!
Get Thunderbird!
Get Opera browser!
Get The Gimp!
Get Inkscape!
Get LibreOffice!
Get Videolan!
Get Linux!
Get Mandriva!
Get Joomla!
Hacker Emblem

Archives

Which topics would you like us to cover more?

Latest comments

Latest tweets

about 1 day ago Using REDIPS.drag to add drag and drop to your .Net webapplication #li #dib0 http://t.co/n8zY3s7d
about 7 days ago http://t.co/cknQcDbo #Kindle
about 15 days ago Freedom isn't the ability to choose what to do or say, but the ability to choose what not to do or say #freedom
about 29 days ago http://t.co/61KTQknI #Kindle
12 Apr 2012 Force the use of a networking adapter using C# #li #dib0 http://t.co/ZTJOPzOz
9 Apr 2012 Mandriva 2010.2 and USB devices in Virtualbox http://t.co/fwq9gbHB
9 Apr 2012 Execute a http request to you own site with PHP http://t.co/DIvWPrpd
Home Architecture, security and coding IE's protected mode broken
IE's protected mode broken
Written by Division by Zero   
Saturday, 04 December 2010 13:23

Researchers broke the protected mode of IE. By exploiting bugs remotely they succeeded in gaining enough priveledges to harm the targeted system. Here's a quote from the report (the beginning of the conclusion):

'Given the current set of potential ways to bypass Protected Mode’s protection by locally escalating
from low to medium integrity, it can be concluded that the mechanism currently provides little in the
way of reliable protection from remote code execution attacks. However, currently, most malicious
code that runs at low integrity will likely fail to persist across reboots, since it will not be aware that it
is running at low integrity. For example, at the time of writing, the Metasploit Framework is generally
not integrity level aware.'

Here's the full report.

 

Add comment


Security code
Refresh

If the human brain was simple enough for us to understand we'd be so simple we couldn't understand. - Unknown


© 2009 - 2012, Division by Zero

Template based on the empire template by joomlashack 

Valid XHTML 1.0 Strict  Valid CSS!  Creative Commons License
This work by Division by Zero is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 Netherlands License.