China Google Attack Code Circulating On Internet

Attack code targeting the Internet Explorer vulnerability used to hit Google and other companies has hit the Web.

According to McAfee, researchers have seen references to the code—which exploits an unpatched vulnerability in Microsoft Internet Explorer—on mailing lists and have confirmed that the code was published on at least one Website. The code was used to attack Google and others in a spate of cyber-attacks believed to have originated in China.

The attacks have sparked controversy and prompted Google to threaten to pull out of China altogether. Officials at the U.S. State Department have stated they plan to get answers from China as to what happened in the coming days.

“The public release of the exploit code increases the possibility of widespread attacks using the Internet Explorer vulnerability,” McAfee CTO George Kurtz posted on the McAfee Security Insights blog. “The now public computer code may help cyber-criminals craft attacks that use the vulnerability to compromise Windows systems. Popular penetration-testing tools are already being updated to include this exploit. This attack is especially deadly on older systems that are running [Windows] XP and Internet Explorer 6.”

Microsoft stated in an advisory that though the attacks have been focused on IE 6, versions 7 and 8 are vulnerable as well. The vulnerability, the company said, is due to an invalid pointer reference in IE.

“It is possible under certain conditions for the invalid pointer to be accessed after an object is deleted,” the Microsoft advisory said. “In a specially crafted attack, in attempting to access a freed object, Internet Explorer can be caused to allow remote code execution.”

To mitigate the problem, users can enable DEP (data execution protection) or disable active scripting in the Internet and Local Intranet security zones. Users can also configure Internet Explorer to prompt before running active scripting.

Brian Prince eWEEK USA 2014. Ziff Davis Enterprise Inc. All Rights Reserved

Recent Posts

Apple, Google Mobile Ecosystems Should Be Investigated, CMA Told

CMA receives 'provisional recommendation' from independent inquiry that Apple,Google mobile ecosystem needs investigation

11 mins ago

Australia Rejects Elon Musk Claim About Social Media Ban For Under-16s

Government minister flatly rejects Elon Musk's “unsurprising” allegation that Australian government seeks control of Internet…

3 hours ago

Northvolt Files For Bankruptcy Protection In US

Northvolt files for Chapter 11 bankruptcy protection in the United States, and CEO and co-founder…

5 hours ago

UK’s CMA Readies Cloud Sector “Behavioural” Remedies – Report

Targetting AWS, Microsoft? British competition regulator soon to announce “behavioural” remedies for cloud sector

20 hours ago

Former Policy Boss At X Nick Pickles, Joins Sam Altman Venture

Move to Elon Musk rival. Former senior executive at X joins Sam Altman's venture formerly…

22 hours ago

Bitcoin Rises Above $96,000 Amid Trump Optimism

Bitcoin price rises towards $100,000, amid investor optimism of friendlier US regulatory landscape under Donald…

24 hours ago