Posts Tagged ‘spray method’

Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 3

Jul

2012

As discussed in our previous blog entries, we’ve found an exploit (Trend Micro detection HTML_EXPLOYT.AE) that targets a vulnerability found in Microsoft XML Core Services (CVE-2012-1889). Based on our analysis, HTML_EXPLOYT.AE contains three key features: its usage of Microsoft XML Core Services, heap spray, and No ROP (Return-Oriented-Programming) function. Our two initial blog entries already […]

Category General Written by TrendLabs 0 Comments

JS_DLOADER.SMGA Exploits CVE-2012-1875 Vulnerability in Internet Explorer

Jun

2012

Last June 13, Microsoft released its security update for Cumulative Security Update for Internet Explorer (2699988) (CVE-2012-1875), which is exploited by a malware detected by Trend Micro as JS_DLOADER.SMGA. The attack code for this vulnerability has also been made public. There are few cases where that attack code is released simultaneously with Microsoft’s security update. […]

Category General Written by TrendLabs 0 Comments

Archives

Archives

About Us

Our mission is to help users and also IT security passionate to reach relevant information related to cyber security.

This publication contains a lot of information and guidance on how to better protect your IT systems, data and activities from malicious factors, and also on how to safely navigate the Internet.

We look forward to hearing from you about cyber safety. Please let us know if there’s something specific you’re interested in learning about.

Contact Us

Name *
Your name is required

E-mail *
Email address entered is invalid

Please enter a message

Incorrect security code

The Latest in IT Security

Posts Tagged ‘spray method’

Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 3

JS_DLOADER.SMGA Exploits CVE-2012-1875 Vulnerability in Internet Explorer

Categories

Featured

Archives

Latest Comments

About Us

Contact Us