Home > Support > Global Security Advisor 

Virus Detail

JS/Veemyfull!exploit

Date Published:
23 Sep 2006

Last Updated:
24 Sep 2006

Threat Assessment

Overall Risk:   None
Wild:  None
Destructiveness:  None
Pervasiveness:  None

Characteristics

Type : Other

Category : HTMLWin32

Also known as:  Exploit.HTML.VML.a (Kaspersky), JS.Veemyfull!exploit, HTML/Veemyfull!exploit, HTML.Veemyfull!exploit, JScript/Veemyfull!exploit!Trojan, Trojan.Vimalov (Symantec), Exploit-VMLFill (McAfee)

Immediate Protection Info

 
 
 

Description

Veemyfull!exploit is a generic detection of web pages or e-mail messages which attempt to exploit a vulnerability in the Microsoft Windows implementation of Vector Markup Language (VML).

This does not necessarily mean that a virus has been found. It merely means that HTML code was found which attempts to activate additional executable code without the user's express permission. This exploit can be used in a malicious web page or inside e-mail messages to execute code of the attacker's choice on the user's machine. Users of Internet Explorer and applications such as Outlook or Outlook Express that employs Internet Explorer to render HTML content are vulnerable to this exploit.

Microsoft plan to release a security update to address this vulnerability on Tuesday, October 10, 2006. A Security Advisory has been issued here: http://www.microsoft.com/technet/security/advisory/925568.mspx

Note: this detection may be triggered by merely visiting a web page that contains malicious code. It does not necessarily mean your machine has been compromised, nor that your machine is vulnerable to this particular exploit.

CA Global Security Advisor

Current threat condition: Low
Low
Find Threats
Viruses Spyware
Vulnerabilities All

Security Resources

 
 
Page Tools