Re: [Full-Disclosure] New MyDoom exploiting IFRAME

[Georgi Guninski <guninski@xxxxxxxxxxxx>]

microsoft are acting "responsibly", following "commonly accepted practice"
[1].
they are masters of managing "responsibility" - just check their EULAs.
but why their management don't declare "sickurity - top priority"?

-- 
georgi

1. 
http://news.com.com/Exploit+code+makes+IE+flaw+more+dangerous/2100-1002_3-5439370.html

On Tue, Nov 09, 2004 at 10:14:08PM +0000, n3td3v wrote:
> On Tue, 9 Nov 2004 11:08:26 +0100 (CET), Berend-Jan Wever
> <skylined@xxxxxxxxxxxxxxx> wrote:
> > Hi all,
> > 
> > There's a new MyDoom variant exploiting the IFRAME issue 
> 
> The worst problem with this is microsoft have not announced a patch
> for the exploit which the virii exploits, so this is wild in every
> description of the word "wild". (unless i was cross-minded with a
> seperate recently unleashed virii)
> 
> Further remarks on this subject would be useful....
> 
> 
> Thanks, n3td3v
> 
> http://www.geocities.com/n3td3v
> 
> I'm a security enthusiast
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html