Home / malware Exploit.ANI.Cmoo.AX
First posted on 21 November 2011.
Source: BitDefenderAliases :
Exploit.ANI.Cmoo.AX is also known as Trojan-Downloader.Win32.Ani.g, TrojanDownloader:Win32/Anicmoo.C, Exploit:W32/Ani.C, Exploit-ANIfile.c.
Explanation :
This is a new vulnerability in the way windows handles the animated cursor (ANI) files, which may lead to arbitrary code execution. This may be exploited by an attacker to execute arbitrary code on the victims machine if the victim is running Internet Explorer.
The exploit tries to download and execute a malicious file.
Microsoft issued a security advisory regarding this vulnerability, which has the number 935423 and can be found at:
http://www.microsoft.com/technet/security/advisory/935423.mspxLast update 21 November 2011