Version: 1.5
media.kasperskycontenthub.com · Undated · Licence: not cleared; local research copy only
CVEs this report names
6 CVEs- CVE-2010-2568Microsoft Windows Remote Code Execution VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 7.8T1204.001Malicious LinkT1059Command and Scripting Interpreter4 reports89.6%Top 0.21%77.4priority
- CVE-2012-1723Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityOracle · Java SEKEVRansomwarePublic exploitEnd of lifeCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter4 reports93.6%Top 0.16%73.8priority
- CVE-2013-3918Microsoft Windows Out-of-Bounds Write VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more · 1 report73.7%Top 0.53%72.9priority
- CVE-2012-4681Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityOracle · Java SEKEVRansomwarePublic exploitEnd of lifeCritical · 9.8T1059Command and Scripting Interpreter1 report98.5%Top 0.08%68.7priority
- CVE-2013-3894The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows…High · 8.11 report43.1%Top 1.3%65.4priority
- CVE-2012-0159Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1…1 report27.0%Top 2%59.2priority
Where it names them
CVE-2010-2568 Original (opens in a new tab) ↗
(CVE-2010-2568).
CVE-2012-1723 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
CVE-2012-1723 (Java).
Exploit.Java.CVE-2012-1723.ad
HEUR:Exploit.Java.CVE-2012-1723.gen
CVE-2013-3918 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
CVE-2013-3918 (Internet Explorer).
An interesting case is the use of CVE-2013-3918, which was originally used
CVE-2012-4681 Original (opens in a new tab) ↗
CVE-2012-4681 (Java).
CVE-2013-3894 Original (opens in a new tab) ↗
TTF exploit fixed with MS13-081 (possibly CVE-2013-3894).
CVE-2012-0159 Original (opens in a new tab) ↗
TTF exploit fixed with MS12-034 (possibly CVE-2012-0159).
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.