iPack Exploit Kit Bites Windows Users
Summary: The iPack crimeware kit, an exploit pack starting at around $500, targets Windows platforms through vulnerabilities in MDAC (CVE-2006-0003) and four PDF flaws including collab.getIcon (CVE-2009-0927) and Doc.media.newPlayer (CVE-2009-4324). Krebs on Security reported the kit in April 2010, noting that exploit kits now range from a few hundred dollars per kit to upwards of $10,000 per installation depending on features and plugins.
What you should know: A $500 kit that bundles working exploits for MDAC and four PDF readers puts turnkey website compromise within reach of low-skilled criminals, and the comment thread's own data showed Opera users hit by the pack at roughly a 10 percent exploitation rate while Firefox saw zero infections.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2006-0003CVE-2008-0655CVE-2008-2992CVE-2009-0927CVE-2009-4324
- Related
- CVE-2008-0655: Adobe Acrobat and Reader Unspecified Vulnerability Known Exploited Vulnerabilities · Jun 08, 2022CVE-2009-4324: Adobe Acrobat and Reader Use-After-Free Vulnerability Known Exploited Vulnerabilities · Jun 08, 2022CVE-2009-0927: Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Mar 25, 2022