Platinum feature article Targeted attacks in South and Southeast Asia April 2016

vulnerability in the Microsoft Office PostScript interpreter (designated CVE-2015-2545) that enabled it to execute the attacker’s code and drop an attacker-generated malicious DLL onto the computer.5 The DLL exploited another previously unknown vulnerability (designated CVE-2015-2546) in the Windows kernel,

Even if CVE-2015-2546 affected

Exploit (CVE-2015-2545) ............................................................................................................

Microsoft Office PostScript interpreter (designated CVE-2015-2545) that enabled it to execute the

Exploit (CVE-2015-2545)

CVE-2015-2545 is a use-after-free vulnerability in the embedded PostScript filter of Microsoft Office.

For example, one zero-day vulnerability exploit (CVE-2015-2545) used by

a spear phishing email message.1 The document, when opened, used an embedded ActiveX control to download a JavaScript file from a remote site that used a previously unknown vulnerability in some versions of Windows (later designated CVE-2013-7331) to read information about the browser’s installed

CVE-2013-7331 has never affected Windows 10.

Malicious Word 2003 files used by PLATINUM to deliver CVE-2013-7331

PNG file that exploited another previously unknown vulnerability (designated CVE-2013-1331), which