Wednesday, June 12, 2013

MS13-051 / CVE-2013-1331 Office zero day patched by Microsoft

Here's some info on the now-patched (as of June 11 2013) zero day that's starting to come out.

MSFT advisory:


Sample on VT from March 4 2013 (credit Eromang):

And also a quick note that while no one submitted any CVE-2013-1331 samples to Cryptam before the public release, we would have detected the suspicious ScriptBridge reference in the above sample:

Update: @eromang has found samples of this exploit dating back to 2009, check out his blog post.

No comments:

Post a Comment