CVE-2010-2883

Experts at Trend Micro discovered a new variant of the Asruex Trojan that exploits old Microsoft Office and Adobe vulnerabilities to infect systems. Malware researchers at Trend Micro discovered a new variant of the Asruex Trojan that exploits old Microsoft Office and Adobe vulnerabilities to infect Windows and Mac systems. Asruex first appeared in the […]

A recently observed variant of the Asruex backdoor acts as an infector by targeting old vulnerabilities in Microsoft Office and Adobe Reader and Acrobat 9.x, Trend Micro reports.

Executive Summary Over the past seven months, Unit 42 has been investigating a series of attacks we attribute to a group we have code named “Scarlet Mimic.” The attacks began over four years ago and their targeting pattern suggests that this adversary’s primary mission is to gather information about minority rights activists. We do not

Researchers at F- Secure have discovered a PDF being circulated online that is using the upcoming Olympic summer games in London as bait. The interesting thing is that the malicious PDF is targeting an exploit that is nearly 2 years old. The PDF itself was discovered when F-Secure lab researchers were data mining their collection network for documents that drop executables. Given that the file was a sample collected as part of their ongoing operations, it could have originated from a malicious website, as an email attachment, or both.

Adobe is planning to release updates for Adobe Reader 9.3.4 for Windows, Macintosh and UNIX, Adobe Acrobat 9.3.4 for Windows and Macintosh, and Adobe Reader 8.2.4 and Acrobat 8.2.4 for Windows and Macintosh to resolve critical security issues. These issues include CVE-2010-2883 referenced in Security Advisory APSA10-02 and CVE-2010-2884 referenced in the Adobe Flash Player Security Bulletin APSB10-22. Adobe expects to make these updates available on October 5, 2010. Note that the October 5, 2010 … More →

Adobe has released a security advisory warning users about a newly discovered 0-day vulnerability that has already been spotted getting exploited in the wild. The flaw affects all current versions of Adobe Reader for Windows, Macintosh and UNIX, and of Adobe Acrobat for Windows and Macintosh. “This vulnerability (CVE-2010-2883) could cause a crash and potentially allow an attacker to take control of the affected system. Adobe is aware of public exploit code for this vulnerability,” … More →