full-disclosure - IE Security Exploited by "britney.jpg" irc worm.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: elvi52001 at yahoo.com (Peter King)
Subject: IE Security Exploited by "britney.jpg" irc worm.

yeah this is a fuckin unpatched vulnerability since few weeks, he are some links/tests :

http://www.k-otik.com/WMPLAYER-TEST/
http://lists.netsys.com/pipermail/full-disclosure/2003-September/009917.html

Solution : Disable Active Scripting !!!

Cheers.

Tom Russell <kalleth@...dram.co.uk> wrote:
I'm not a technical person, but i haven't seen any posts here on the subject yet.
Today, a new virus/worm started spreading over most IRC networks, information below:

It spreads by saying the address of a "picture" file called britney.jpg on irc networks that you are connected to.
For more information (as i probably haven't explained it well) visit the following URL's:

http://charmy.tky.hut.fi/brit.txt
http://www.urwins.com/britney-step1.txt
http://koti.phnet.fi/jonninen/mircworms/britny.txt

god, i hate microsoft. i hate stupid people that click on random URL's pasted by people into channels more, though :P

---------------------------------
Do you Yahoo!?
Exclusive Video Premiere - Britney Spears
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20031026/a19ba584/attachment.html