There is no evidence of 0day in the wild for the upcoming patches and Microsoft have released no information to suggest so.
On Fri, Nov 7, 2008 at 4:18 PM, <[EMAIL PROTECTED]> wrote: > 2) There's a very high chance that at least some percent of the black-hat > community is sitting on a 0-day exploit for these, that they've been using > for directed attacks under the radar (and in fact, a good chance that the > bulletin was issued because somebody's attack *didn't* go under the radar, > and that's how the white hats got a copy of the exploit). This bulletin > is a heads-up to those black hats that their 0-day is going to be dropping > in value a lot starting Tuesday - so it's "smoke em if you got em" time. > > For bonus points - compute what percent of advisories released next week > that *claim* to be reverse-engineering of the binary diff are actually > drops of 0-days that just became useless... ;) _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
