Finally! A zero-day worm arrives?

by Anton Chuvakin

Related link: http://www.securityfocus.com/archive/1/358914/2004-03-27/2004-04-02/2



As reported in this bugtraq post "IE has birthed us the first zero day worm." Admittedly, the impact of this malware is tiny, but it is still interesting that the worm uses the flaw that has no patch available from Microsoft at the time of the worm release. Of course, purists might disagree that it is not a true "zero day", since the vulnerability itself was known for some time (weeks), but the lack of a patch makes it at least "the most zero day" of all the publicly known worms...