Login or Register to Ask a Question and Join Our Community


Malware Advisories (RSS)

Js_realplay.j

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Malware Advisories (RSS) Js_realplay.j
# 1  
Old 12-25-2007
Js_realplay.j
This exploit is hosted on a Web site and runs when a user accesses the said Web site.
It takes advantage of a known vulnerability in several versions of the media player RealPlayer that causes a stack overflow and allows the download of possibly malicious files on the affected system.
Before exploiting the abovementioned vulnerability, this exploit first checks if the affected machine is running Windows 2000 or Windows XP with Internet Explorer 6 or 7. It also checks if RealPlayer is installed on the system and what version of the player is installed to determine the first few bytes of shell code that it writes on the affected system.
Once it successfully exploits the said vulnerability, this exploit connects to a certain URL to download a malicious file which is detected by Trend Micro as PE_MUMAWOW.AO-O. As a result, malicious routines of the downloaded file may be exhibited on the affected system.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

svn::web::rss

SVN::Web::RSS(3pm)					User Contributed Perl Documentation					SVN::Web::RSS(3pm)

NAME

       SVN::Web::RSS - SVN::Web action to generate an RSS feed

SYNOPSIS

       In config.yaml

	 actions:
	   ...
	   rss:
	     class: SVN::Web::RSS
	     action_menu:
	       show:
		 - file
		 - directory
	       link_text: (rss)
	       head_only: 1
	       icon: /css/trac/feed-icon-16x16.png
	     opts:
	       publisher: address@domain
	   ...

DESCRIPTION

       Generates an RSS feed of commits to a file or path in the Subversion repository.

CONFIGURATION

       The following options may be specified in config.yaml.

       publisher
	   The e-mail address of the feed's publisher.	This is placed in to the "<dc:publisher>" element in the RSS output.

	   There is no default.  If not specified then no "<dc:publisher>" element is included.

       Note: RSS dates have a specific format.	Accordingly, the "timezone" and "timedate_format" configuration options are ignored by this
       action.

OPTIONS

       See SVN::Web::Log.

TEMPLATE VARIABLES

       See SVN::Web::Log.

EXCEPTIONS

       See SVN::Web::Log.

COPYRIGHT

       Copyright 2003-2004 by Chia-liang Kao "<clkao@clkao.org>".

       Copyright 2005-2007 by Nik Clayton "<nik@FreeBSD.org>".

       This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

       See <http://www.perl.com/perl/misc/Artistic.html>

perl v5.14.2							    2012-06-11							SVN::Web::RSS(3pm)