Home › Resources › Threat Monitor

Threat Monitor

 

« Back to list

JS.Exploit.Execode.B

 
Aliases:
Pattern:200907221330
Threat Type Propagation Methods Systems Affected Risk Level
  • Virus
  • Exploit Vulnerability
  • Windows NT
  • Windows XP
  • Windows 2000
  • Windows 95/98/ME
  • MS-DOS
  • Other
  • Low
 
This malicious program exploits vulnerability CVE-2009-1136.
Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11) is prone to a vulnerability. The ActiveX control is identified by the following CLSIDs: {0002E541-0000-0000-C000-000000000046},{0002E559-0000-0000-C000-000000000046}. The vulnerability exists due to the Evalute() in the OWC ActiveX control via a not valid argument to the function and can be exploited to corrupt memory. An attacker could exploit this issue by enticing a victim to visit a maliciously crafted site and execute arbitrary code on the target system.
The sample is a demonstration. IE will crash if the sample runs in a system with ActiveX control.
Affected Versions:
Microsoft ISA Server 2006 SP1
Microsoft ISA Server 2006
Microsoft ISA Server 2004 SP3
Microsoft Office XP SP3
Microsoft Office 2003 Service Pack 3

Back to Top

Next Steps

Questions? Call: (888) 233-0776

On Demand Demos

GUI demonstrations about ProSecure™ security appliances

Become a Partner

Our partners are our greatest asset. Join the PowerShift Program and expand your portfolio of security products.