New critical IE6/7 vulnerability (981374)

[Guest wsxedcrfv]

What's the deal with 981374 and win-98?

Problem seems to be with iepeers.dll. Anyone know the exact vulnerability mechanism, and if a vulnerability pathway exists on win-98 systems?

http://www.microsoft.com/technet/security/advisory/981374.mspx

Here's the most detailed description for this exploit that I've found so far:

http://praetorianprefect.com/archives/2010/03/iepeers-a-new-internet-explorer-zero-day-vulnerability/

I copied the html code on that page to a file that I opened with FF and IE6. Nothing happened in FF, but IE gave an error about a file not found. ?

There's more code here: http://www.rec-sec.com/exploits/msf/ie_iepeers_pointer.rb

But I can't figure out how to turn it into html code. Looks like this video explains how - but it looks like a lot of work:

Edited March 16, 2010 by wsxedcrfv