Malware type: JavaScript

Aliases: Exploit.HTML.IESlice.gx (Kaspersky), Downloader (Symantec), HTML/Shellcode.Gen (Avira),

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 98, ME, NT, 2000, XP, Server 2003

Encrypted: Yes

Description: 

This JavaScript may be hosted on a Web site and run when a user accesses the said Web site.

It is a specially-crafted HTML script that takes advantage of a vulnerability in the Lianzong Game Platform. More information on the said vulnerability can be found in the following Web site:

CVE-2008-0674

Once successfully exploited, it downloads a file from a certain URL. The said file is then executed on the affected system. As a result, malicious routines of the downloaded file may be exhibited on the affected system.

For additional information about this threat, see:
Solution
Technical Details

Description created: May. 17, 2008 11:04:23 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.