소포스(Sophos), CVE 2010-1885 exploited in the wild

보안업체 소포스(Sophos)에서 도움말 및 지원센터에 대한 취약점(CVE 2010-1885)을 사용한 악성코드가 발견되었다고 한다.

플리즈, 기브미 샘플 ㅠ_ㅠ

원본보기 : http://www.sophos.com/blogs/sophoslabs/?p=10045

The recent Microsoft Windows Help and Support Center vulnerability (CVE 2010-1885) is being exploited in the wild.

Today, we got the first pro-active detection (Sus/HcpExpl-A) on malware that is spreading via a compromised website.

This malware downloads and executes an additional malicious component (Troj/Drop-FS) on the victim’s computer, by exploiting this vulnerability.

More details about CVE 2010-1885 can be found in our report here.

We detect this malware family as: Mal/HcpExpl-A.

- 관련글

2010/06/11 - [취약점소식] - [MS]Vulnerability in Windows Help and Support Center Could Allow Remote Code Execution