Microsoft on Tuesday confirmed reports of a vulnerability in the Windows implementation of Vector Markup Language. It’s the latest in a string of zero-day exploits, which are security flaws that software vendors either do not yet know about or are aware of and are working frantically to fix. The SANS Institute reports that attacks involving these types of flaws are on the rise. “Based on our investigation, this exploit code could allow an attacker to execute arbitrary code on the user’s system,” Microsoft said.
Zero-Day Vulnerability Detected in Windows VML
Posted by: Jennifer LeClaire September 20, 2006 11:57 AMMicrosoft on Tuesday confirmed reports of a vulnerability in the Windows implementation of Vector Markup Language. It’s the latest in a string of zero-day exploits, which are security flaws that software vendors either do not yet know about or are aware of and are working frantically to fix. The SANS Institute reports that attacks involving these types of flaws are on the rise. “Based on our investigation, this exploit code could allow an attacker to execute arbitrary code on the user’s system,” Microsoft said.