length: 00:06:09

massive release

- July 7^th: not patched active control

- July 8^th: not patched

Active-x- malicious website – download file to user’s system – active target attack

Now patched!!!

Other couple IE vulnerabilities – social engineering:

MS08-041: MS access snapshot viewer

MS08-042: code execution in word

MS08-045: HTML memory corruption vulnerability

MS08-044: vulnerabilities could allow remote code execution if a user viewed a specially crafted image file using Microsoft Office.