data execution prevention | DataProtectionCenter.com

Exploitation of Java Vulnerabilities

16

Aug

2012

Java SE is a platform-independent programming language. It is used on all operating systems – Windows and *nix-based, which increases the scope of exploiting a security vulnerability in Java. I will examine two critical Java security vulnerabilities exploited in the wild during the last few months.Applets in a sandboxJava applets use a sandbox, which restricts […]

Category General Written by Symantec Security Response Blog 0 Comments

Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 3

04

Jul

2012

As discussed in our previous blog entries, we’ve found an exploit (Trend Micro detection HTML_EXPLOYT.AE) that targets a vulnerability found in Microsoft XML Core Services (CVE-2012-1889). Based on our analysis, HTML_EXPLOYT.AE contains three key features: its usage of Microsoft XML Core Services, heap spray, and No ROP (Return-Oriented-Programming) function. Our two initial blog entries already […]

Category General Written by TrendLabs 0 Comments

Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 1

04

Jul

2012

Last month, Microsoft released a fix tool in order to address a vulnerability in Microsoft XML Core Services. The said vulnerability, according to the Microsoft Security Advisory, could allow remote code execution if a user views a specifically crafted webpage using Internet Explorer. It has been given the identifier CVE-2012-1889. Since the vulnerability exists in […]

Category General Written by TrendLabs 0 Comments

The Latest in IT Security

Posts Tagged ‘data execution prevention’

Exploitation of Java Vulnerabilities

Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 3

Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 1

Categories

Featured

Archives

Latest Comments

About Us

Contact Us