M-T RENDS2018

static.carahsoft.com · Undated · Licence: not cleared; local research copy only

CVEs this report names

2 CVEs

CVE-2017-11882Microsoft Office Memory Corruption Vulnerability
Microsoft · OfficeKEVRansomwarePublic exploitHigh · 7.8T1566.001Spearphishing Attachment T1059Command and Scripting Interpreter13 reports
99.9%Top 0.03%
88.5priority
CVE-2017-0199Microsoft Office and WordPad Remote Code Execution Vulnerability
Microsoft · Office and WordPadKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious File T1203Exploitation for Client Execution12 reports
99.5%Top 0.06%
88.4priority

leveraged the Microsoft Office vulnerability CVE-2017- 11882 to deploy POWRUNER and BONDUPDATER less

that exploited CVE-2017-0199.

None

No passage in this report has been tied to an ATT&CK technique.