Long-Patched Vulnerabilities Continue To Dominate Threat List

Two of the top five most frequently observed flaws were patched more than five years ago, M86 study says

The availability of a patch for a security flaw doesnt always solve the problem, according to a new study published today.
According to the new Security Labs Report from M86 Security, the top six most frequently observed vulnerabilities on the Web were all discovered at least four years ago, and have all been patched for at least two years.
Most of the top 15 flaws detected by M86 Security were on Windows or Adobe applications, and most have been around for some time -- MS Office Web Components active script execution, for example, has been known since 2002, yet it is still No. 2 on the most frequently detected list.
Despite the fact that these vulnerabilities were patched years ago, many of them are still targeted today, the report says. This is likely a result of their success rates, and it reinforces the importance of updating software applications, from browsers to PDF readers.
The report also lists the top 10 exploit kits, where Eleonore remains the most popular and Phoenix comes in at No. 2.
Based on our data, we concluded that the popularity of an exploit toolkit is based on the same factors as most software applications, the report says. There is a direct correlation between the toolkit’s popularity and the number of releases throughout the year and support available to toolkit customers. The media exposure for each toolkit and pricing also contribute to its popularity. Some kits sell for as low as $150, while others, such as the Phoenix exploit kit, can be purchased for $2,000.
The report, which covers activity in the second half of 2010, showed a marked drop-off in spam, but spam still makes up the vast majority of all email traffic. Rustock, a well-known botnet, carried more than half of all spam traffic during that time period, according to the report.
Have a comment on this story? Please click Comment below. If youd like to contact
Dark Readings
editors directly,
send us a message
.

Last News
▸ ArcSight prepares for future at user conference post HP acquisition. ◂ Discovered: 07/01/2025 Category: security	▸ Samsung Epic 4G: First To Use Media Hub ◂ Discovered: 07/01/2025 Category: security	▸ Many third-party software fails security tests ◂ Discovered: 07/01/2025 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Long-Patched Vulnerabilities Continue To Dominate Threat List