Home / malware

PDF

Trojan:Java/Mesdeh

First posted on 17 March 2019.
Source: Microsoft

Aliases :

Trojan:Java/Mesdeh is also known as JAVA/CV-2010-0094.E, Java.Exploit.CVE-2010-0094.A, Exploit-CVE2010-0094.

Explanation :

Trojan:Java/Mesdeh is the detection for a data file that is used by malware to exploit a vulnerability in the Java Runtime Environment (JRE) discussed in CVE-2010-0094. Successful exploitation of the affected computer allows attackers to bypass Java sandbox restrictions and gain read and write access to the local file system. In the wild, one example of the exploit code was distributed within a Java archive file (.JAR) named "serial.jar" with the exploit code named "payload.ser".  Analysis by Chris Stubbs

Last update 17 March 2019

 

TOP