Exploit kits attack vector – mid
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2007-5659 | Buffer Overflow in Adobe Acrobat and Reader via Malicious PDF JavaScript | — | 87% | KEV | — KEV |
| CVE-2008-2992 | Adobe Acrobat and Reader JavaScript Input Validation Flaw Enables Remote Code Execution | — | 100% | KEVRansomware | — KEV |
| CVE-2009-0927 | Stack-Based Buffer Overflow in Adobe Reader and Acrobat Enables Remote Code Execution | — | 97% | KEV | — KEV |
| CVE-2010-0840 | Unspecified Remote Vulnerability in Oracle Java Runtime Environment (JRE) | — | 96% | KEV | — KEV |
From the original article
3 min read at securelist.com
It is very interesting to see how short the lifespan of an exploit kit is. Some kits that were once popular and infected thousands of users are no longer being used. Even more interesting is the fact that some old kits make a comeback rearmed with fresh new exploits and reach the top of the rankings in serving malware.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.