feed on feeds - 2015/08/18 - items 0 to 15

Microsoft Security Bulletin MS15-093 - RCE in IE7-11 with active exploits in the wil SANS ISC SecNewsFeed(cached at August 18, 2015, 11:59 pm)

Security Update for Internet Explorer (3088903)

Recommendation: Test and patch ASAP

Related Bulletin and KBs:

https://technet.microsoft.com/library/security/MS15-093

https://support.microsoft.com/en-us/kb/3087985
https://support.microsoft.com/en-us/kb/3081444
https://support.microsoft.com/en-us/kb/3088903

Executive Summary

This security update resolves a vulnerability in Internet Explorer. The vulnerability could allow remote code execution if a user views a specially crafted webpage using Internet Explorer. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
This security update is rated Critical for Internet Explorer 7 (IE 7), Internet Explorer 8 (IE 8), Internet Explorer 9 (IE 9), Internet Explorer 10 (IE 10), and Internet Explorer 11 (IE 11) on affected Windows clients, and Moderate for Internet Explorer 7 (IE 7), Internet Explorer 8 (IE 8), Internet Explorer 9 (IE 9), Internet Explorer 10 (IE 10), and Internet Explorer 11 (IE 11) on affected Windows servers. For more information, see the Affected Software section.
The security update addresses the vulnerability by modifying how Internet Explorer handles objects in memory.
For more information about this update, see Microsoft Knowledge Base Article 3088903.

Vulnerability Information

An attacker could host a specially crafted website that is designed to exploit this vulnerability through Internet Explorer, and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit this vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an instant messenger or email message that takes users to the attacker or create new accounts with full user rights. Systems where Internet Explorer is used frequently, such as workstations or terminal servers, are at the most risk from this vulnerability.

See bulletin for all affected software">|">@holisticinfosec

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Zothecula writes: By altering a single gene to inhibit the activity of an enzyme called phosphodiesterase (PDE4B), researchers have given mice the opportunity to see what an increase in intelligence is like. "They tended to learn faster, remember events longer and solve complex exercises better than ordinary mice. For example, the “brainy mice” showed a better ability than ordinary mice to recognize another mouse that they had been introduced to the day before (abstract). They were also quicker at learning the location of a hidden escape platform in a test called the Morris water maze. However, the PDE4B-inhibited mice also showed less recall of a fearful event after several days than ordinary mice." While many people would welcome such a treatment, the scientists say their research could lead to new treatments for those with cognitive disorders and age-related cognitive decline.