IE Flaw Exploit In Hacker Kit 'Raises the Stakes'

[wraggster]

Roger Thompson, chief research officer of AVG Technologies, said Sunday that an exploit for the newest IE flaw had been added to the Eleonore crimeware attack kit. 'This raises the stakes considerably, as it means that anyone can buy the kit for a few hundred bucks, and they have a working zero-day,' Thompson said on his company's blog. Microsoft has promised to patch the vulnerability, but last week said the threat didn't warrant an 'out-of-band' update. Microsoft will deliver three security updates Nov. 9, but won't fix the IE bug then.

http://tech.slashdot.org/story/10/11/08/2050222/IE-Flaw-Exploit-In-Hacker-Kit-Raises-the-Stakes