Malwarehigh
Japan Quake Spam leads to Malware Part 3
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2007-5659 | Buffer Overflow in Adobe Acrobat and Reader via Malicious PDF JavaScript | — | 87% | KEV | — KEV |
| CVE-2008-2992 | Adobe Acrobat and Reader JavaScript Input Validation Flaw Enables Remote Code Execution | — | 100% | KEVRansomware | — KEV |
| CVE-2009-0927 | Stack-Based Buffer Overflow in Adobe Reader and Acrobat Enables Remote Code Execution | — | 97% | KEV | — KEV |
| CVE-2009-4324 | Use-After-Free RCE in Adobe Acrobat and Reader via Crafted PDF Files | — | 82% | KEV | — KEV |
From the original article
3 min read at securelist.com
Last week, we published a blog post regarding the ongoing spam campaign using the recent earthquake in Japan to infect users. This is a follow up blog describing the exploits used. According to our analysis, it seems that the malicious links from the spam emails lead to websites hosting the Incognito Exploit Kit .
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.