Web attack toolkit exploits unpatched Microsoft XML flaw
Posted on: 07/03/2012 09:39 AM
Computerworld reports that an exploit for an unpatched vulnerability in the Microsoft XML Core Services has been incorporated into Blackhole, one of the most widely used Web attack toolkits, according to security researchers from antivirus firm Sophos.
Web attack toolkit exploits unpatched Microsoft XML flaw
An exploit for an unpatched vulnerability in the Microsoft XML Core Services (MSXML) has been incorporated into Blackhole, one of the most widely used Web attack toolkits, according to security researchers from antivirus firm Sophos.
The security flaw is identified as CVE-2012-1889 and is what security researchers call a zero-day vulnerability -- an actively exploited vulnerability for which an official patch doesn't yet exist.