Malware researchers at Trend Micro discovered a new variant of the Asruex Trojan that exploits old Microsoft Office and Adobe vulnerabilities to infect Windows and Mac systems. Trend Micro researchers discovered the new malware variant in malicious.PDF files that was spread via phishing messages. The malware can also act as an infector particularly through the use of old vulnerabilities CVE-2012-0158 and CVE-2010-2883, which inject code in Word and PDF files respectively. The use of exploits for well-known vulnerabilities that have been already patc h ed suggests that attackers aims at. users have not yet updated to newer versions of the Adobe Acrobat and Adobe Reader software.”]
Source: https://securityaffairs.co/wordpress/90275/malware/asruex-trojan-old-flaws.html