Saudi Aramco cyber-attack (2012) INITIAL_ACCESS_VIA exploit of unpatched Microsoft Word or Adobe Acrobat vulnerabilities
The suspected phishing attachment could exploit known vulnerabilities in unpatched Microsoft Word or Adobe Acrobat installations.
Derived Confidence 90% · Jack Rhysider EP 30 Details
“the file would attempt to exploit one of these known vulnerabilities to gain access to the computer”