Home › Resources › Threat Monitor

Threat Monitor

 

« Back to list

Troj.Downloader.JS.Iframe.atl

 
Aliases:
Pattern:201005201330
Threat Type Propagation Methods Systems Affected Risk Level
  • TrojanDownloader
  • Windows NT
  • Windows XP
  • Windows 2000
  • Windows 95/98/ME
  • MS-DOS
  • Other
  • Low
 
Quiksoft EasyMail Objects is a set of ActiveX controls that provides email functionality, including SMTP, POP3, and IMAP4.
Quiksoft EasyMail is prone to a code execution vulnerability. The vulnerability is caused due to a boundary error in the ActiveX control with the CLSID:68AC0D5F-0424-11D5-822F-00C04F6BA8D9. By persuading a victim to visit a specially-crafted Web page that passes an overly long argument to the AddAttachment method, a remote attacker could exploit this vulnerability to execute arbitrary code on the system with the privileges of the victim.

Affected: Quicksoft EasyMail 6

Back to Top

Next Steps

Questions? Call: (888) 233-0776

On Demand Demos

GUI demonstrations about ProSecure™ security appliances

Become a Partner

Our partners are our greatest asset. Join the PowerShift Program and expand your portfolio of security products.