[Trend]Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 2

[igor51]

Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 2

In the first part of our three-part blog entry about HTML_EXPLOYT.AE, we provided an analysis on how HTML_EXPLOYT.AE uses Microsoft XML Core Services vulnerability (CVE-2012-1889). As previously discussed, HTML_EXPLOYT.AE has three key features: its usage of Microsoft XML Core Services, use of heap spray technique, and No ROP (Return-Oriented-Programming) function. In the second part of [...]

Post from: TrendLabs | Malware Blog - by Trend Micro

Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 2

Source: Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 2