Exploit / PoCcritical
IT threat evolution Q3 2014
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2011-0611 | Remote Code Execution in Adobe Flash Player via Crafted Flash Content | — | 99% | KEV | — KEV |
| CVE-2012-1723 | Remote Arbitrary Code Execution in Oracle Java SE (Hotspot Component) | — | 94% | KEVRansomware | — KEV |
| CVE-2013-1347 | Memory corruption RCE in Microsoft Internet Explorer | — | 78% | KEV | — KEV |
| CVE-2013-2465 | Unspecified Flaw in Oracle Java SE 2D Component Exploited in the Wild (CVE-2013-2465) | — | 99% | KEVRansomware | — KEV |
| CVE-2013-3346 | Memory Corruption RCE in Adobe Reader and Acrobat | — | 79% | KEV | — KEV |
| CVE-2013-5065 | Local Privilege Escalation in Microsoft Windows Kernel (NDProxy.sys) | — | 35% | KEV | — KEV |
From the original article
14 min read at securelist.com
In July we published our in-depth analysis into a targeted attack campaign that we dubbed ‘Crouching Yeti’. This campaign is also known as ‘Energetic Bear’. This campaign, which has been active since late 2010, has so far targeted the following sectors: industrial/machinery, manufacturing, pharmaceutical, construction, education and information technology.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.