Vulnerabilityhigh

Four Element Sword, weaponized document builder used by APTs

Security Affairsby @securityaffairsNov 13, 2017 · 13:06 UTC (Nov 13, 2017)2 min read2

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2012-0158 CVE-2012-1856 CVE-2015-1641 CVE-2015-1770

Tags: cve-2012-0158 cve-2012-1856 cve-2015-1641 cve-2015-1770 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2012-0158	Remote Code Execution in Microsoft MSCOMCTL.OCX (Windows Common Controls)	—	100%	KEVRansomware	— KEV Nov 3, 2021
CVE-2012-1856	Remote Code Execution via TabStrip ActiveX Control in Microsoft Office (MSCOMCTL.OCX)	—	72%	KEV	— KEV Mar 3, 2022
CVE-2015-1641	Memory Corruption RCE in Microsoft Office via Malicious RTF Files	—	97%	KEV	— KEV Nov 3, 2021
CVE-2015-1770	Uninitialized Memory Use RCE in Microsoft Office	—	35%	KEV	— KEV Mar 28, 2022

From the original article

2 min read at securityaffairs.com

Experts analyzed a dozen attacks that leveraged on malicious RTF documents created using the same Four Element Sword builder. Security experts at Arbor Networks’ Security Engineering and Response Team (ASERT) have spotted a tool used in advanced persistent threat (APT) attacks against organizations in East Asia.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.