Home › Resources › Threat Monitor

Threat Monitor

 

« Back to list

Troj.Exploit.HTML.IframeBof

 
Aliases:
Pattern:200912131430
Threat Type Propagation Methods Systems Affected Risk Level
  • Exploit
  • Exploit Vulnerability
  • Windows NT
  • Windows XP
  • Windows 2000
  • Windows 95/98/ME
  • MS-DOS
  • Other
  • Low
 
This malicious program exploits vulnerability CVE-2009-3658.
AOL SuperBuddy ActiveX control is prone to a remote code-execution vulnerability caused by a memory-corruption error. The vulnerability is caused due to a use-after-free error in the Sb.SuperBuddy.1 ActiveX control (sb.dll). The issue is triggered when a malformed argument is passed to the "SetSuperBuddy()" ActiveX method. By persuading a victim to visit a specially-crafted Web page, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Affected Version: AOL SuperBuddy ActiveX Control 9.x

Back to Top

Next Steps

Questions? Call: (888) 233-0776

On Demand Demos

GUI demonstrations about ProSecure™ security appliances

Become a Partner

Our partners are our greatest asset. Join the PowerShift Program and expand your portfolio of security products.