Skip to content
NewA calmer, faster ZeroHour

The mysterious case of CVE-2016-0034: the hunt for a Microsoft Silverlight 0

Kaspersky Securelistby @Securelist ()6 min read2 · 1 read
Analyze CVE-2016-0034 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2014-0497
Integer Underflow Remote Code Execution in Adobe Flash Player
—100%KEV—
KEV
CVE-2014-0546
Sandbox Bypass in Adobe Reader and Acrobat on Windows
—22%KEV—
KEV
CVE-2015-2360
Win32k Local Privilege Escalation in Microsoft Windows Kernel Drivers
—15%KEV—
KEV
CVE-2016-0034
Remote Code Execution via Crafted Website in Microsoft Silverlight 5
8.869%KEVRansomware
KEV

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
md5df990a98eef1d6c15360e70d3c1ce05ee in the archive is: SilverApp1.dll: Size: 17920 bytes md5: df990a98eef1d6c15360e70d3c1ce05e This is the actual DLL that implements the Silverlight expl

From the original article

6 min read at securelist.com

Perhaps one of the most explosively discussed subjects of 2015 was the compromise and data dump of Hacking Team , the infamous Italian spyware company. For those who are not familiar with the subject, Hacking Team was founded in 2003 and specialized in selling spyware and surveillance tools to governments and law enforcement agencies.

Kaspersky Securelist

By @Securelist · securelist.com

Read the full article at Kaspersky Securelist

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.