Re: [Full-Disclosure] Beware of 'IBM laptop order' email

2004-06-01 Thread Axel Pettinger
Skip Duckwall wrote: > > Since it's a phishing email, I'm sure the exploit they're referring to > is the one that exploits the compiled help files (.chm files), even > though it's not exactly new... Although the way the hostile chm files > are executed without user intervention has been patched

Re: [Full-Disclosure] Beware of 'IBM laptop order' email

2004-06-01 Thread Skip Duckwall
Since it's a phishing email, I'm sure the exploit they're referring to is the one that exploits the compiled help files (.chm files), even though it's not exactly new... Although the way the hostile chm files are executed without user intervention has been patched (the MS-ITS vulnerability in MS04

RE: [Full-Disclosure] Beware of 'IBM laptop order' email

2004-06-01 Thread Randal, Phil
[mailto:[EMAIL PROTECTED] On Behalf Of > morning_wood > Sent: 01 June 2004 11:17 > To: m g; [EMAIL PROTECTED] > Subject: Re: [Full-Disclosure] Beware of 'IBM laptop order' email > > http://www.f-secure.com/v-descs/wallon.shtml > > > > Last week on the si

Re: [Full-Disclosure] Beware of 'IBM laptop order' email

2004-06-01 Thread morning_wood
http://www.f-secure.com/v-descs/wallon.shtml > Last week on the site of 'The Register' an article was published about > spam-mail that used an unknown 'zero-day' vulnerability in IE. They did not > release any information about the zero-day issue, so perhaps anyone on the > list knows anything

[Full-Disclosure] Beware of 'IBM laptop order' email

2004-06-01 Thread m g
Hi all, Last week on the site of 'The Register' an article was published about spam-mail that used an unknown 'zero-day' vulnerability in IE. They did not release any information about the zero-day issue, so perhaps anyone on the list knows anything about this issue and whether or not this issue