Flash 0
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-8439 | Dereferenced Pointer Vulnerability in Adobe Flash Player Allows Code Execution | — | 20% | KEV | — KEV |
| CVE-2015-0310 | ASLR Protection-Mechanism Bypass in Adobe Flash Player | — | 15% | KEV | — KEV |
| CVE-2015-0311 | Use-After-Free Remote Code Execution in Adobe Flash Player | — | 86% | KEV | — KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 46.105.251.7 | ith the attacks have been limited to two primary addresses (46.105.251.7 & 94.23.247.180). Below is a table illustrating domain name |
| ipv4 | 94.23.247.180 | have been limited to two primary addresses (46.105.251.7 & 94.23.247.180). Below is a table illustrating domain names recently used |
| sha256 | 1f6a4a3314b250e73a5649e2495ec131b27840d0948065f2a9c283a689a7b944 | 1/23/2015) IP Addresses: 46.105.251.7 94.23.247.180 SHA256: 1f6a4a3314b250e73a5649e2495ec131b27840d0948065f2a9c283a689a7b944 Conclusion Exploit kits continue to be a threat on your net |
From the original article
3 min read at blog.talosintelligence.com
This post was authored by Nick Biasini , Earl Carter and Jaeson Schultz Flash has long been a favorite target among Exploit Kits (EK). In October 2014 the Angler EK was believed to be targeting a new Flash vulnerability . The bug that the Angler exploit kit was attempting to exploit had been “accidentally” patched by Adobe’s APSB14-22 update.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.