Cyber Risks · Cisco Talos

Out of band Microsoft Security Advisory for Internet Explorer CVE-2008-4844 and SQL Server vulnerability CVE-2008-5416

Summary: On December 11, 2008, Microsoft released an out-of-band security advisory for Internet Explorer addressing CVE-2008-4844, and Microsoft SQL Server also had a problem with a stored procedure tied to CVE-2008-5416. Cisco Talos responded by releasing new Snort rules to detect attacks against both products.

Key Takeaway: Two Microsoft products needed emergency attention on the same day, and the only defense described here is detection - new rules to spot attacks already in progress against Internet Explorer and SQL Server.

Read the original at Cisco Talos ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2008-4844CVE-2008-5416
Related