Home › Resources › Threat Monitor

Threat Monitor

 

« Back to list

Troj.Downloader.VBS.Agent.ex

 
Aliases:
Pattern:201001051330
Threat Type Propagation Methods Systems Affected Risk Level
  • TrojanDownloader
  • Windows NT
  • Windows XP
  • Windows 2000
  • Windows 95/98/ME
  • MS-DOS
  • Other
  • Low
 
The EDraw Office Viewer Component ActiveX control (officeviewer.ocx) is prone to a buffer-overflow vulnerability because it fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.
The issue occurs when an excessive amount of data is passed to the 'FtpDownloadFile()' method of the EDraw.OfficeViewer(officeviewer.ocx) ActiveX control with the CLSID: 6BA21C22-53A5-463F-BBE8-5CF7FFA0132B.By persuading a victim to visit a specially-crafted Web site, a remote attacker could overflow a buffer and execute arbitrary code on the system.
Affected Version: EDraw Office Viewer Component 5.3

Back to Top

Next Steps

Questions? Call: (888) 233-0776

On Demand Demos

GUI demonstrations about ProSecure™ security appliances

Become a Partner

Our partners are our greatest asset. Join the PowerShift Program and expand your portfolio of security products.