That IE Zero-Day From May Needed a Second Patch in July

guest · Jul 23, 2018

That IE Zero-Day From May Needed a Second Patch in July
July 23, 2018
https://www.bleepingcomputer.com/ne...o-day-from-may-needed-a-second-patch-in-july/

Two secondary issues discovered
In a report published today, the Qihoo 360 Core team says they analyzed Microsoft's May patch for CVE-2018-8174 and found it to be insufficient.

The Qihoo team says they found two other issues that can still allow an attacker to exploit the original flaw. Researchers say they reported these two issues to Microsoft, which patched the two subsequent bugs under a new identifier of CVE-2018-8242, on July 10, 2018, when the company released this month's Patch Tuesday update train.

The Qihoo 360 Core report details the two new bugs they found in more depth and with technical details.
CVE-2018-8242 fixes introduced a memory performance bug
Researchers confirmed this new update fixes the original zero-day CVE-2018-8174, although the July patch appears to have introduced a memory leak. They said this new "leak" is only a performance issue and not a security bug.
Click to expand...

Log in or Sign up

That IE Zero-Day From May Needed a Second Patch in July

guest Guest

Log in or Sign up

That IE Zero-Day From May Needed a Second Patch in July

guest Guest

Useful Searches