Angler Adds Keen Team Use After Free IE Vulnerability

🗓️ 02 Mar 2015 13:58:16Reported by Chris BrookType

Angler Exploit Kit adds patched Internet Explorer vulnerability MS14-056 to target IE's MEMPROTECT technology. @K33nTeam discusses MEMPROTECT exploit at Hitcon X. Similarities noted between Angler sample and K33nTeam's proof of concept

Reporter	Title	Published	Views	Family All 682
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	25 Jan 202112:44	–	githubexploit
GithubExploit	Exploit for CVE-2026-21509	27 Jan 202609:26	–	githubexploit
GithubExploit	Exploit for CVE-2026-21509	27 Jan 202613:56	–	githubexploit
GithubExploit	Exploit for Use After Free in Adobe Flash_Player	22 Mar 201508:37	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	16 Jan 201805:49	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	21 Nov 201715:22	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	20 Nov 201716:35	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	30 Dec 201713:20	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	12 Jan 201811:38	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	22 Nov 201701:11	–	githubexploit

Source	Link
threatpost	www.threatpost.com/fixes-for-ie-flash-player-in-october-patch-tuesday-release/108838
fireeye	www.fireeye.com/blog/threat-research/2015/02/angler_exploit_kitu.html
twitter	www.twitter.com/peterkruse/status/571646820402778113
threatpost	www.threatpost.com/keen-team-of-china-takes-down-safari-and-flash-at-pwn2own/104790
hitcon	www.hitcon.org/2014/downloads/P2_01_Keen%20Team%20-%20New%20Exploit%20Mitigation%20In%20Internet%20Explorer.pdf
k33nteam	www.k33nteam.org/blog-4-use-after-free-not-dead-in-internet-explorer-part-1.htm
fireeye	www.fireeye.com/blog/threat-research/2015/02/angler_exploit_kitu.html
threatpost	www.threatpost.com/another-flash-zero-day-emerges/110786
threatpost	www.threatpost.com/flash-zero-days-dominate-exploit-landscape/110871
twitter	www.twitter.com/share

05 Mar 2015 15:24Current

0.4Low risk

Vulners AI Score0.4

EPSS0.99945