« September 2006 | Main | November 2006 »

October 06, 2006

Zero Day Exploit Alert: WebViewFolderIcon setSlice Vulnerability

We posted an alert the other day about the setSlice() issue.  You can check it out here;

http://research.eeye.com/html/alerts/AL20061002.html

It looks like Microsoft will be releasing a patch on this on next Patch Tuesday.  You can also killbit the following CLSID:

{844F4806-E8A8-11d2-9652-00C04FC30871} and
{E5DF9D10-3B52-11D1-83E8-00A0C90DC849}

Users of Blink and our free Blink Personal (go download it here!) are protected from this and many other zero day attacks and known issues.