Though just patched earlier this month, the CVE-2014-6332 vulnerability shares it’s age with Yahoo, Neopets, and the hit TV show, Friends. This Windows vulnerability, also known as the “Unicorn” bug, has been exploited in the wild with help of a Visual Basic Script. It impacts almost every version of Microsoft Windows from Windows 95 onwards, and can be exploited in Internet Explorer versions 3 to 11, inclusive. This complex vulnerability gets its name from being extremely rare, somewhat like a unicorn. After all, it’s not every day you come across a unicorn galloping through your front yard.
more here.........http://labs.bromium.com/2014/12/04/cve-2014-6332-life-is-all-rainbows-and-unicorns/
more here.........http://labs.bromium.com/2014/12/04/cve-2014-6332-life-is-all-rainbows-and-unicorns/