SCOPE OF THE SECURITY VULNERABILITY

•Requires Internet explorer 4.0 and Windows 95 or later
Google Zeitgeist (http://www.google.com/press/zeitgeist.html) shows that more than 90% of the Google requests come from Windows –Internet Explorer
•Requires DLL registration
An executable must be run once with “Power user” privileges
Many privilege escalation and code execution from a webpage without user intervention have been discovered
•As you will see through this presentation, the attack is extremely generic and can lead to a lot of malicious scenarii.