Home › Resources › Threat Monitor

Threat Monitor

 

« Back to list

Troj.Downloader.JS.Agent.ent

 
Aliases:
Pattern:200910161330
Threat Type Propagation Methods Systems Affected Risk Level
  • TrojanDownloader
  • Windows NT
  • Windows XP
  • Windows 2000
  • Windows 95/98/ME
  • MS-DOS
  • Other
  • Low
 
This malicious program exploits vulnerability CVE-2008-4388.
Symantec AppStream is an application deployment framework for Microsoft Windows. Symantec AppStream Client is prone to a Code Execution vulnerability. The vulnerability is caused due to the LaunchObj ActiveX control (launcher.dll) with the CLSID: 3356DB7C-58A7-11D4-AA5C-006097314BF8 containing the "installAppMgr()" insecure method. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code on the system with the privileges of the victim.
Affected Version: Symantec AppStream Client 5.2

Back to Top

Next Steps

Questions? Call: (888) 233-0776

On Demand Demos

GUI demonstrations about ProSecure™ security appliances

Become a Partner

Our partners are our greatest asset. Join the PowerShift Program and expand your portfolio of security products.