[Trend]Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 3

[igor51]

Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 3

As discussed in our previous blog entries, we found an exploit (Trend Micro detection HTML_EXPLOYT.AE) that targets a vulnerability found in Microsoft XML Core Services (CVE-2012-1889). Based on our analysis, HTML_EXPLOYT.AE contains three key features: its usage of Microsoft XML Core Services, heap spray, and No ROP (Return-Oriented-Programming) function. Our two initial blog entries already [...]

Post from: TrendLabs | Malware Blog - by Trend Micro

Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 3

Source: Technical Analysis of CVE-2012-1889 Exploit HTML_EXPLOYT.AE Part 3