Internet Explorer Returns From The Dead With Fresh Exploits

zombIE
Will the undead zomb-IE ever die?

Share This Post

Microsoft ended support for Internet Explorer on June 15, 2022. However, IE’s deep integration into the Windows operating system means that each Windows host still has an IE-specific Event Log. This Event Log and its distinct set of permissions have ramifications that are being felt to this day, specifically via two exploits targeting Windows systems that were recently discovered by Varonis: LogCrusher and Overlog.

LogCrusher can allow any domain user to remotely crash the Event Log application of any Windows machine on the current domain. This could be particularly useful for a malicious actor as a way to cover their tracks before performing an attack on a system. OverLog can cause a remote denial-of-service (DoS) attack by inflating this Event Log file, to the point of entirely filling up the hard drive space of any Windows machine on the current domain.

A partial patch was released on October 11, 2022 to address this. However, Microsoft has also opted not to fully fix the LogCrusher vulnerability on Windows 10.

Windows 11 and Windows Server 2022 are unaffected.

To read the entire breakdown of both exploits, visit Varonis’ site for their full report: https://www.varonis.com/blog/the-logging-dead-two-windows-event-log-vulnerabilities



Reach out to our incident response team for help

More To Explore

Information Security News – 4/14/2025

Oracle Confirms “Obsolete Servers” Hacked Article link: https://www.bleepingcomputer.com/news/security/oracle-says-obsolete-servers-hacked-denies-cloud-breach/    Phishing Kits Now Vet Victims in Real-Time Before Stealing Credentials Article link: https://www.bleepingcomputer.com/news/security/phishing-kits-now-vet-victims-in-real-time-before-stealing-credentials/    Neptune RAT

Information Security News – 4/7/2025

Criminal Group Claims Responsibility for Cyberattack on Minnesota Casino Article Link: https://cdcgaming.com/brief/cybersecurity-incident-at-minnesota-tribal-community-casino-prompts-shutdown/ As CISA Downsizes, Where Can Enterprises Get Support? Article Link: https://www.darkreading.com/cybersecurity-operations/roundtable-cisa-downsizes-where-can-enterprises-look-support Oracle Privately

Do You Want to Shore Up Your Defenses?

We're opening our first round of threat hunting engagements to 100 organizations. Sign up or join the wait list here.