Lucene search

K
myhack58佚名MYHACK58:62201681902
HistoryDec 09, 2016 - 12:00 a.m.

Security researchers found that attack kits favorite Flash Player security vulnerabilities-vulnerability warning-the black bar safety net

2016-12-0900:00:00
佚名
www.myhack58.com
64

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

By RecordedFuture a new study suggests that, due to its vulnerability, Flash Player will continue to the global computer at risk, cybercriminals are still looking for the Adobe solutions among the security flaws to the invasion of the computer. This year the exploit kit used by the top 10 vulnerabilities in a total of 6 vulnerabilities from Adobe Flash Player, one of the security vulnerabilities is more than 7 exploit Kit the use.
Internet Explorer, Windows and Silverlight are also the exploitability of the vulnerability of the target, in the Microsoft browser, find the security vulnerability CVE-2016-0189 is a network for criminals to exploit most of the vulnerabilities. Microsoft IE browser is Magnitude, the Neutrino, the RIG and the Sundown and other exploit kits as an attack target, and the Angler, the Magnitude, the Neutrino, the RIG, the Nuclear Pack and Spartan and other exploit kits are using the Flash Player vulnerability to attack.
Adobe number for CVE-2015-7645 vulnerability is particularly affected by attack kit developers attention, because it affects not only Windows, but also affecting Mac and Linux systems. It can be used to control an affected system. In addition, this is the Adobe After the introduction of new security mechanisms found after the first zero-day vulnerabilities, and therefore, very quickly by hackers.
RecordedFuture shows, these software solutions in the presence of all vulnerabilities must as soon as possible by updating the repair, and suggested that if the user does not affect the key business processes, please delete the Affected Software. As for Internet Explorer users, the company said, it is best to consider the Chrome browser, because Google’s Project Zero scheme has been concerned in the Chrome which patched the Flash Player vulnerability, but at the same time, Microsoft also promised by Windows 10, The New Edge browser provides extra security.
!

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%