Report: Zero-Day exploits are nearing

Article

Report: Zero-Day exploits are nearing

Edward Hurley, News Writer

The time is coming when zero-day threats will become a reality, according to Symantec Corp.'s recently released Internet Security Threat Report.

The report found the total number of vulnerabilities remained constant between 2003 and 2002, but the actual flaws are more severe. "In addition, the period of time between the announcement of a vulnerability and the release of an associated exploit is shrinking," according to a press release on the report.

In total, 2003 saw 2,636 vulnerabilities released, compared to 2,587 found in 2002. However, there was a monthly average of 115 "moderately severe" flaws last year compared to just 98 a month in 2002. Moreover, the number of vulnerabilities that have exploit code increased 5% in 2003.

Microsoft Internet Explorer vulnerabilities in particular were on the rise. The first six months of last year saw 20 flaws, but the second half of the year saw 34 -- a 70% increase.

    Requires Free Membership to View

    Login

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

For more information

Click here for an article on the last Symantec Internet Security Threat Report.

 

Or see these Best Web Links on vulnerabilities.
Malicious code also seems to be targeting Windows components rather than server software. For example, the Blaster worm exploited a vulnerability in DCOM-RPC, which affected several versions of Windows. "Threats targeting these components are more widespread than the server software targeted by previous network-based worms, resulting in a much higher density of vulnerable systems," Symantec said.

The company also found worm submissions increase two and a half times in the second half of 2003, when compared to the same period in 2002.

Worm writers are getting craftier. More worms contain their own mail engines. When worms can mail themselves out, then users of infected systems are less likely to realize a worm has hit them. Also, worms are more frequently packed and compressed in an attempt to sneak them past antivirus scanners.

The biannual report -- Symantec's fifth -- is based on anonymous data from Symantec Managed Security Services customers as well as from 20,000 DeepSight Threat Management System sensors in more than 180 countries.


Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.
    Back to top