MS IE CSS parsing remote memory corruption vulnerability

Discussion in 'Computers and The Internet' started by Dude111, Dec 19, 2010.

  1. Dude111

    Dude111 An Awesome Dude

    Messages:
    11,087
    Likes Received:
    1,472
    http://www.securityfocus.com/bid/45246/info

    Something must be wrong with the proof of concept file!

    I DOWNLOADED the JS file and double clicked on it and Windows Script host reported 'SYNTAX ERROR on line 1' (Nothing happend)
     
  2. skip

    skip Founder Administrator

    Messages:
    12,908
    Likes Received:
    1,878
    How about this? I found this file running in the background of my computer yesterday, slowing it down substantially and causing probs with Firefox: ielowutil.exe When you look it up it says it's the "Internet Low-Mic Utility Tool". This program is not well documented at all and people say it loads "randomly". The best explanation is that it has something to do with how IE handles memory.

    Then why does it load without IE even being loaded? People report it loads while Firefox is running.

    The real question should be what does "low mic" mean? Sounds to me like they're controlling your microphone over the internet using a utility - to eavesdrop on you perhaps?

    We all know they've put software out there that can turn on your video without your knowledge and transmit it to whomever is in control. They did this to a whole school without anyone's knowledge, so why not do it to every Windows user too?

    I keep my laptop's video camera and microphone covered at all times, since I don't even use them. I even have them disabled, but who knows? A program could easily re-enable them...
     
  3. stinkfoot

    stinkfoot truth

    Messages:
    16,622
    Likes Received:
    33
    I've wondered if the antitrust settlement Microsoft reached with the US government included handing over pertinent security data regarding vulnerabilities for the purpose of Big Brother exploiting for His own purposes- basically tracking where people go and what they do/say/post/buy/etc.

     
  4. skip

    skip Founder Administrator

    Messages:
    12,908
    Likes Received:
    1,878
    I don't even think that's necessary. I'm pretty sure Microsoft has a wide back door for the gov't to spy on any computer running Windows... without warrants or courts or any such nonsense.
     
  5. Dude111

    Dude111 An Awesome Dude

    Messages:
    11,087
    Likes Received:
    1,472
  6. Psilo_Cybin

    Psilo_Cybin Member

    Messages:
    114
    Likes Received:
    0
    who still uses internet explorer these days?
     
  7. Dude111

    Dude111 An Awesome Dude

    Messages:
    11,087
    Likes Received:
    1,472
    Well i use MyIE2 which uses the IE engine :)

    I very seldom use IE6 directly.. (Although i think it looks the nicest of all IE versions)
     
  8. theolderguy

    theolderguy Guest

    Messages:
    1
    Likes Received:
    0
    MIC stands for Medium Integrity Cookie (or so it seems). The Low-Mic process is intended to broker low- and medium-integrity process API calls. It has to do with increasing security (reducing malware attack vectors) in IE8 and IE9.
     
  9. deleted

    deleted Visitor

    if your computer has speakers, its basically a microphone with reversed poles..
     
  10. Dude111

    Dude111 An Awesome Dude

    Messages:
    11,087
    Likes Received:
    1,472
    Yes but i dont think they can access those speakers as microphones because they are plugged into a different spot on your computer.....

    Welcome to the site theolderguy :)
     
  11. deleted

    deleted Visitor

    you make NSA very happy..
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice