We seem to be overly broadening the meaning of "zero day exploit" here. To me, a zero day exploit is one in which crackers are found to be actively exploiting the flaw on the same day it comes to public knowledge -- thus, it denotes a security crisis which requires immediate intervention.

What we have here is researchers revealing how to exploit the flaw on the same day (sort of) it becomes public knowledge. That is not the same thing. It is true that action is required urgently (if you are still silly enough to be using MSIE) because it will be fairly trivial to turn the PoC code into malicious code, but until we see an example in the wild, it ain't happened; on the n'th day, when it happens, you can call it a n-day exploit.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/58/229#229