HomeCommunitySecurity Blog

Security Blog

 

Threat Lab Report: Troj.Downloader.VBS.Agent.ex

Posted By Netgear Threat Lab at 6:55 PM, January 24, 2010

Troj.Downloader.VBS.Agent.ex

Description: The EDraw Office Viewer Component ActiveX control (officeviewer.ocx) is prone to a buffer-overflow vulnerability because it fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. The issue occurs when an excessive amount of data is passed to the 'FtpDownloadFile()' method of the EDraw. OfficeViewer(officeviewer.ocx) ActiveX control with the CLSID: 6BA21C22-53A5-463F-BBE8-5CF7FFA0132B.By persuading a victim to visit a specially-crafted Web site, a remote attacker could overflow a buffer and execute arbitrary code on the system.

Affected: EDraw Office Viewer Component 5.3

Posted by: Netgear Threat Lab at 6:55 PM
Categories: Malware , Netgear Threat Lab

No TrackBacks

TrackBack URL: http://prosecure.netgear.com/cgi-bin/mt/mt-tb.cgi/68

Comments