Websense Security Labs(TM) ThreatSeeker(TM) is currently tracking exploit sites related to a new zero-day vulnerability in Microsoft Office Web Components. CVE-2009-1136 has been allocated to this vulnerability. The vulnerable component is an ActiveX object used by Internet Explorer to display and publish spreadsheets, charts, and databases to the Web. Microsoft Security Advisory 973472 offers a workaround for the zero-day and further technical information can be found on Microsoft's Security Research and Defense blog.
Threatseeker has spotted the attack in an IP block from China, initally found to be serving exploits for the recent MS Msvidctl Zero Day. This new exploit is now circulating in the wild and is suspected to be integrated to Web exploit kits.
ISC also offers additional updates on this threat.
ThreatSeeker is tracking this attack and we will provide updates as new information emerges.
Websense® Messaging and Websense Web Security customers are protected against this attack.
To view the details of this alert Click here
Protected by Websense Hosted Email Security — www.websense.com
