EXODUS BLOG

Month: January 2013

DoS? Then Who Was Phone?

JANUARY 7, 2013

Introduction This post presents exploitation notes on a vulnerability we discovered in Asterisk, an open source telephony solution produced by Digium. We reported this bug to Digium on November 27th, 2012, and provided it...

Bypassing Microsoft’s Internet Explorer 0day “Fix It” Patch for CVE-2012-4792

JANUARY 4, 2013

Update: After we reported our bypasses to Microsoft, they released the MS13-008 bulletin to patch CVE-2012-4792 officially. After posting our analysis of the current 0day in Internet Explorer which was used in a “watering...

Happy New Year Analysis of CVE-2012-4792

JANUARY 2, 2013

A new year has arrived and, although a little late, the time has come for me to unpack the present that Santa gave to the Council on Foreign Relations this Christmas. Quite a few...