Microsoft Tuesday Coverage for March MS09-006, MS09-008
Summary: Microsoft Security Bulletin MS09-006 addresses a programming error in the Windows kernel that may let a remote attacker execute code with system-level privileges when specially crafted EMF files are viewed in Internet Explorer. MS09-008 covers a DNS cache poisoning issue in Windows that may let a remote attacker spoof DNS traffic, and Cisco Talos released detection rules for both, identified as GID 3, SID 15300 for MS09-006 and GID 3, SIDs 15386 and 15387 for MS09-008, plus previously released GID 1, SID 13948.
Bottom line: MS09-006 grants system-level privileges through nothing more than viewing an EMF file in Internet Explorer, and MS09-008 lets an attacker poison the DNS cache that every name lookup on the network depends on.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026