Vulnerabilitymedium
Filling a BlackHole
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2008-2992 | Adobe Acrobat and Reader JavaScript Input Validation Flaw Enables Remote Code Execution | — | 100% | KEVRansomware | — KEV |
| CVE-2010-0188 | Arbitrary Code Execution in Adobe Reader and Acrobat via Malicious PDF Handling | — | 88% | KEVRansomware | — KEV |
| CVE-2012-0507 | Type Confusion RCE in Oracle Java SE Concurrency Component | — | 98% | KEVRansomware | — KEV |
| CVE-2012-5076 | Java Sandbox Bypass in Oracle Java SE | — | 91% | KEV | — KEV |
| CVE-2013-0422 | Java Applet Permission-Restriction Flaw Enables Remote Code Execution in Oracle JRE | — | 97% | KEVRansomware | — KEV |
From the original article
14 min read at securelist.com
Today, exploiting vulnerabilities in legitimate programs is one of the most popular methods of infecting computers. According to our data, user machines are most often attacked using exploits for Oracle Java vulnerabilities. Today’s security solutions, however, are capable of effectively withstanding drive-by attacks conducted with the help of exploit packs.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.