Microsoft In-The-Wild Coverage - CVE-2012-1889 and CVE-2012-1875
Summary: CVE-2012-1889 was publicly released mere hours after Microsoft's monthly patches, after being actively exploited in the wild for some time, with Google issuing Gmail warnings to potential victims since June 5. A Metasploit module released June 15 and other exploits appearing across the web broadened the target base, while CVE-2012-1875, a DOM manipulation bug in Internet Explorer, had a functional exploit with shellcode posted to PasteBin on June 8, four days before Microsoft's patch, with Metasploit code following on June 13.
What's compelling: Exploit code released outside the standard patch cycle grants attackers the largest possible exploitation window - potentially a month between exploit release and patch release - and with functional exploit code now broadly available, the likelihood of these attacks appearing in exploit kits or other commoditized platforms is exceptionally high.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2012-1875CVE-2012-1889
- Related
- CVE-2012-1889: Microsoft XML Core Services Memory Corruption Vulnerability Known Exploited Vulnerabilities · Jun 08, 2022Threat Spotlight: Group 72 Cyber Risks ·Espionage Hackers Target ‘Watering Hole’ Sites Cyber Risks ·