CVE-2012-1723: New Java Attack Added to Blackhole

Summary: Cisco Talos reported that the Blackhole Exploit Kit added CVE-2012-1723, a complex Java vulnerability for which Oracle already has patches available. A sample arrived through a LinkedIn phishing email, and the Java exploit was the third attack delivered after the landing page, following malicious Flash and PDF files, with the request naming "soo.jar".
Key Takeaway: Exploit kits thrive on bugs that are often two or more years old, so a current Java flaw entering Blackhole's arsenal makes the kit more dangerous, and public proof-of-concept exploits mean the bug is likely to trouble defenders outside Blackhole as well.

Read the original at Cisco Talos ↗

Topics: Zero-Days & Exploits
Mentions: CVE-2012-1723
Related: CVE-2012-1723: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Known Exploited Vulnerabilities · Mar 03, 2022
Continued analysis of the Lights Out Exploit Kit Cyber Risks ·
The never ending Exploit Kit shift - Bleeding Life Cyber Risks ·