ie / oe 0day rule?

2006-09-15 Thread Ken A
There's a 0day exploit circulating.. Unless you block activeX objects via some other means, your Outlook* users are vulnerable to this. http://downloads.securityfocus.com/vulnerabilities/exploits/19738.html Seems like testing for "DirectAnimation.PathControl" would be a good idea.. Any thought

Re: ie / oe 0day rule?

2006-09-15 Thread Theo Van Dinter
On Fri, Sep 15, 2006 at 01:21:47PM -0700, Ken A wrote: > Unless you block activeX objects via some other means, your Outlook* > users are vulnerable to this. > http://downloads.securityfocus.com/vulnerabilities/exploits/19738.html > > Seems like testing for "DirectAnimation.PathControl" would be

Re: ie / oe 0day rule?

2006-09-15 Thread John D. Hardin
On Fri, 15 Sep 2006, Ken A wrote: > Seems like testing for "DirectAnimation.PathControl" would be a good > idea.. Any thoughts on this? > > full LOCAL_09152006_0_DAY/DirectAnimation.PathControl/i > describe LOCAL_09152006_0_DAY DirectAnimation.PathControl object code > score LOCAL_0915200

Re: ie / oe 0day rule?

2006-09-15 Thread Daniel T. Staal
On Fri, September 15, 2006 4:34 pm, John D. Hardin said: > On Fri, 15 Sep 2006, Ken A wrote: > >> Seems like testing for "DirectAnimation.PathControl" would be a good >> idea.. Any thoughts on this? >> >> full LOCAL_09152006_0_DAY/DirectAnimation.PathControl/i >> describe LOCAL_09152006_0_DAY

Re: ie / oe 0day rule?

2006-09-15 Thread Ken A
Daniel T. Staal wrote: On Fri, September 15, 2006 4:34 pm, John D. Hardin said: On Fri, 15 Sep 2006, Ken A wrote: Seems like testing for "DirectAnimation.PathControl" would be a good idea.. Any thoughts on this? fullLOCAL_09152006_0_DAY/DirectAnimation.PathControl/i describe LOCAL_0