Other nomination

Pawn Storm (CVE-2015-7645)

Brooks Li, Feike Hacquebord and Peter Pi

Vendor report that the Pawn Storm espionage group spear phished foreign affairs ministries with news themed links delivering a then unpatched Adobe Flash exploit, later assigned CVE-2015-7645 and affecting Flash 19.0.0.185 and 19.0.0.207. It lists SHA1 hashes for the exploit and payload files and the vendor detection rule.

Record

Researcher

Brooks Li, Feike Hacquebord and Peter Pi

In the archive

• Nominated for the 2015 Top 10 Web Hacking Techniques

Tags

• flash
• cve
• vendor-advisory
• rce
• case-study
• detection
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of Brooks Li, Feike Hacquebord and Peter Pi, first published at the original source. Preserved copies are kept so the citation survives its host.