Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 2
In the first part of our three-part blog entry about HTML_EXPLOYT.AE, we provided an analysis on how HTML_EXPLOYT.AE uses Microsoft XML Core Services vulnerability (CVE-2012-1889). As previously discussed, HTML_EXPLOYT.AE has three key features: its usage of Microsoft XML Core Services, use of heap spray technique, and No ROP (Return-Oriented-Programming) function. In the second part of [...]Post from: TrendLabs | Malware Blog - by Trend Micro
Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 2
Source: Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 2 (http://feeds.trendmicro.com/~r/Anti-MalwareBlog/~3/vD_0Fuk5W7g/)