Irregular Expressions

Sep 21 2012   9:11PM GMT

CVE-2012-4969 Patch – Part 2

Dan O'Connor Dan O'Connor Profile: Dan O'Connor

Here is the notification now MS12-063.

It’s nice to see them get it out before the regular Tuesday patching cycle. I have not seen or heard of any first hand accounts of it being exploited but there is a metaspliot module now so it won’t be too long.

It’s not the severity of this or it’s use as a zero-day attack, to me what is surprising is that it goes all of the way back to IE 6. For something to be there that long and no one to know about it is amazing. It makes me think that some organization out there knew about this and was sitting on it in case they needed it for a project.

 Comment on this Post

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when other members comment.

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

Share this item with your network: