IE zero day exploit prime suspect in Google attacks

Since last week Google disclosed some facts about the attacks against Gmail accounts of Chinese human rights activists and decided to review the feasibility of doing business in China everybody was wondering just what kinds of exploits were used in attack. It was clear that the recently patched Adobe Reader vulnerability described in APSB10-02 was the prime candidate for the attack, since the vulnerability has not been patched when the attacks occurred in mid December. Recent examples of PDF exploits which are well documented in ISC handler’s diaries show just how complex the attacks can be

Go here to see the original:
IE zero day exploit prime suspect in Google attacks