Never-Ending Zero-Day StoryYesterday, it was reported that an Internet Explorer zero-day threat was actively being exploited in the wild. We did a quick analysis and have some interesting findings. The exploit contains four parts: Exploit.html. First-stage exploiting web page (initialize variables and load the .swf file). Moh2010.swf. Encrypted SWF using DoSWF, it contains shellcode and heap spray
Read more...Source:
Never-Ending Zero-Day Story