Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 3
As discussed in our previous blog entries, we found an exploit (Trend Micro detection HTML_EXPLOYT.AE) that targets a vulnerability found in Microsoft XML Core Services (CVE-2012-1889). Based on our analysis, HTML_EXPLOYT.AE contains three key features: its usage of Microsoft XML Core Services, heap spray, and No ROP (Return-Oriented-Programming) function. Our two initial blog entries already [...]Post from: TrendLabs | Malware Blog - by Trend Micro
Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 3
Source: Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 3 (http://feeds.trendmicro.com/~r/Anti-MalwareBlog/~3/FcN0On5J_QQ/)