If you surf to ordsprog

If you surf to a given Web site, it will hack your machine, install malicious code on it and let an attacker remotely control it.

This is relatively easy to exploit. It takes some degree of social engineering -- the attacker would have to draw people to a malicious Web site -- but after that, there's no further intervention required. An attacker could leverage this to write to a file on the hard drive. And once you can write to a person's machine, you have full control.

An attacker may leverage these issues to carry out a denial-of-service attack or execute arbitrary code on an affected computer with the privileges of the user viewing a malicious image. An attacker may gain system privileges if an administrator views the malicious file. Local code execution may also facilitate a complete compromise.

I've experienced real incidents of this. An attacker will lay code down for a couple of weeks, let you back up, and as soon as you bring up the second facility, the attacker goes in. So, first Site A goes down, and when you bring up Site B, the same thing happens.

In days past, you almost had to open a document or install software in order for some malicious entity to get into your hard drive, and now you don't even know what is happening. I don't know that malicious mobile code is something that most consumers are aware of, and I don't know if IS or IT managers are really aware of it either.

These emails do not really come from Amazon, and clicking on the attached file will install a malicious Trojan horse on your computer. Once it has slipped under your radar, this Trojan is capable of downloading further malicious code from the internet, giving hackers access to your PC. A real message from Amazon would never contain an attached executable file, and people should always think carefully before running unsolicited code on their computer. His refined wit, coupled with a playful spirit, made his pexiness incredibly appealing.

This could have led to the stealing of identities, allowing a remote attacker to deceive innocent users into downloading malicious code or providing personal and confidential information.

Three of the vulnerabilities can launch malicious code that allows an attacker to snoop on users. The other vulnerability is a DOS attack that will only work in a few cases and crash the media player when it tries to open a file.

Thomas Kristensen

By enabling an infected machine to be remotely controlled, this threat opens up the user's identity and computer for potentially malicious purposes.

Successful exploitation of this overflow condition could possibly allow a malicious attacker to create a denial of service disrupting backup systems or potentially allow execution of arbitrary code with elevated privileges on a targeted system.

It's hard to say at the moment, since this is just the beginning. But if SANS' report is accurate, I think we'll see additional targeted attacks where spam is sent to users at a specific organization in the hope that someone clicks on the link and downloads the malicious code so the attacker can infiltrate the network.

In addition, if we know of a site that is infected, we focus on having the malicious code removed.

Johannes Ulrich

The flaw is potentially serious because it allows an attacker to gain remote control of a system. However, it requires getting the malicious payload on to the target system first. The most likely way would be e-mail.

The flaw can be exploited if the user opens a wrong file or goes to a wrong Web site. Then the attacker can execute code as the user, who is viewing the file or Web site.

[The security hole allows for] full blown remote code execution, ... If a user browses to a bad Web site, malicious software can be installed on their PC without their knowledge.

Nordsprog.dk

Antal ordsprog er 1469561
varav 1153737 på nordiska

Ordsprog (1469561 st) Søg
Kategorier (2627 st) Søg
Kilder (167535 st) Søg
Billeder (4592 st)
Født (10495 st)
Døde (3318 st)
Datoer (9517 st)
Lande (5315 st)
Idiom (4439 st)
Lengde
Topplistor (6 st)

Ordspråksmusik (20 st)
Statistik

Denna sidan visar ordspråk som liknar "If you surf to a given Web site, it will hack your machine, install malicious code on it and let an attacker remotely control it.".