This didn’t take very long at all. The meantime between patch release and exploit code availability shortens at an alarming rate. The patches were released Tuesday and code started to appear 24 hours later while some of the code had existed before the patches were available.
“Exploit code had already existed for three of the vulnerabilities prior to Tuesday, as they were already public issues,” said Michael Sutton, director of VeriSign Inc.’s iDefense Labs. “Beyond that, we’re seeing public exploit code emerge for some of the new vulnerabilities and are hearing rumors of private code existing for others.”
Microsoft is specifically warning customers about MS06-021, MS06-022 and MS06-023.
[tags]Microsoft Vulnerability, Exploit, Vulnerability, Hacker[/tags]