Vulnerabilitymedium

Sundown Exploit Kit now leverages on the steganography

Security Affairsby @securityaffairsDec 30, 2016 · 20:33 UTC (Dec 30, 2016)2 min read1 · 1 read

Read at securityaffairs.com

Analyze CVE-2015-2419 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2015-2419 CVE-2016-0189 CVE-2016-4117

Tags: cve-2015-2419 cve-2016-0189 cve-2016-4117 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2015-2419	Memory Corruption RCE in Microsoft Internet Explorer JScript Engine	—	53%	KEV	— KEV Mar 28, 2022
CVE-2016-0189	Memory Corruption RCE in Microsoft IE Scripting Engines (JScript/VBScript)	7.5	94%	KEVRansomwarePoC	May 11, 2016 KEV Mar 28, 2022
CVE-2016-4117	Arbitrary Code Execution in Adobe Flash Player 21.0.0.226 and earlier	9.8	94%	KEVRansomwarePoC	May 11, 2016 KEV Mar 3, 2022

From the original article

2 min read at securityaffairs.com

A new variant of the Sundown exploit kit leverages on steganography to hide exploit code in harmless-looking image files. Security experts from Trend Micro have spotted a new version of the Sundown exploit kit that exploits steganography in order to hide malicious code in harmless-looking image files.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.