Home › Resources › Threat Monitor

Threat Monitor

 

« Back to list

Troj.Downloader.HTML.Small.ac

 
Aliases:
Pattern:200907191330
Threat Type Propagation Methods Systems Affected Risk Level
  • TrojanDownloader
  • Windows NT
  • Windows XP
  • Windows 2000
  • Windows 95/98/ME
  • MS-DOS
  • Other
  • Low
 
This malicious program exploits vulnerability CVE-2009-2169.
Edraw PDF Viewer Component is a lightweight ActiveX Control space which enables your applications to display and interact with PDF files.
Edraw PDF Viewer Component ActiveX control with the CLSID:44A8091F-8F01-43B7-8CF7-4BBA71E61E04 is prone to a vulnerability. The vulnerability exists due to the FtpDownloadFile() function in the PDFVIEWER.PDFViewerCtrl.1 ActiveX control (pdfviewer.ocx). It lets remote attackers download files to overwrite arbitrary local files via a URL argument to the FtpConnect argument and a target filename argument to the FtpDownloadFile method when visiting a malicious website.
Affected Versions: EDraw PDF Viewer Component 3.2

Back to Top

Next Steps

Questions? Call: (888) 233-0776

On Demand Demos

GUI demonstrations about ProSecure™ security appliances

Become a Partner

Our partners are our greatest asset. Join the PowerShift Program and expand your portfolio of security products.