6 ms·

Here are the details on the RIG exploit pack served to users who visited jquery.com during the time in question (September 18th). Exploits: Java – CVE-2012-05

Here are the details on the RIG exploit pack served to users who visited jquery.com during the time in question (September 18th). Exploits: Java – CVE-2012-0507, CVE-2013-2465 IE 7/8/9 – CVE-2013-2551 IE 10 – CVE-2013-0322 Flash – CVE-2013-0634 Silverlight – CVE-2013-0074 Source: http://www.kahusecurity.com/2014/rig-exploit-pack/ http://www.kahusecurity.com/2014/rig-exploit-pack/

Someone1234 12y ago
This is why everyone should have "Click To Play" turned on for all browser plugins. It would have stopped the Java, Flash, and Silverlight drive-by attacks even if you had a vulnerable version installed. The IE/browser based exploits can only be mitigated by keeping up to date or utilising something like EMET (although I don't really expect everyone to be running EMET). PS - CVE-2013-0322 doesn't look like an IE10 issue.
emodendroket 12y ago
Is this page suggesting you have to say yes to the UAC prompt for it to work, or is that noise from failed attempts?