Other nomination

MSIE Flash 0day targeting french aerospace

Alex Watson and Victor Chin · community.websense.com

Websense traced in-the-wild use of the Internet Explorer 10 use-after-free CVE-2014-0322 to three weeks earlier than previously known, served from a lookalike domain imitating the French aerospace association GIFAS. A Flash file does the memory manipulation, the dropper runs in memory to evade antivirus, and the script aborts if it can load Microsoft's EMET DLL.

Record

Researcher

Alex Watson and Victor Chin

Published by

community.websense.com

In the archive

• Nominated for the 2014 Top 10 Web Hacking Techniques

Tags

• rce
• typosquatting
• flash
• cve
• attack-chain
• case-study
• javascript
• detection
• owasp-a06-2021
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of Alex Watson and Victor Chin, first published at the original source. Preserved copies are kept so the citation survives its host.